VYPR

npm package

hugo-delphinus-mini-css-extract-plugin-hermes

pkg:npm/hugo-delphinus-mini-css-extract-plugin-hermes

Malware

2 malicious versions on record

One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.

  • GHSA-5w95-j452-g48jMalicious code in hugo-delphinus-mini-css-extract-plugin-hermes (npm)
    Sep 13, 2026
  • MAL-2025-143385Malicious code in hugo-delphinus-mini-css-extract-plugin-hermes (npm)
    Nov 12, 2025

Vulnerabilities (0)

No CVEs are currently linked to this package.