EUVD-2025-124318

Malicious code in non-blocking-auriga-inquirer-graphql npm...

EUVD-2025-124103

Malicious code in ophiuchus-halley-graphql-pavo npm...

EUVD-2025-124073

Malicious code in ophiuchus-vega-xml-graphql npm...

EUVD-2025-124840

Malicious code in mocha-graphql-alphard-sirius npm...

EUVD-2025-113113

Malicious code in graphql-charon-element-ui-iota npm...

EUVD-2025-123329

Malicious code in procyon-ganymede-foundation-graphql npm...

EUVD-2025-112969

Malicious code in halley-graphql-miranda-changelog npm...

EUVD-2025-116834

Malicious code in aldebaran-bootstrap-mensa-graphql npm...

EUVD-2025-113112

Malicious code in graphql-cordelia-flare-slidev npm...

Malicious code in pavo-graphql-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6523adc4e404cbe331811a878d4d2667af07aae668bf286e33c5611ffd5bef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-cordelia-flare-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c569d1055906f1a8d85265083113aef012a036c83d606bdc7b82d327b4c349e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113106

Malicious code in graphql-orbit-csrf-yaml npm...

Malicious code in stop-flare-graphql-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39fd5efa47d0de28572480beb46c4b09366251f5981c1cbd75c0877711c8b1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121630

Malicious code in stop-flare-graphql-webdriverio npm...

EUVD-2025-116754

Malicious code in altair-chai-transform-graphql npm...

EUVD-2025-113812

Malicious code in europa-vuepress-sass-loader-graphql npm...

EUVD-2025-121282

Malicious code in thuban-delphinus-rollup-plugin-graphql npm...

MAL-2025-147986 Malicious code in slides-graphql-markdown-pdf-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e875d6758d07bb506554c8efb933ea288df266b933847f0fdb34e06da7e69b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139793 Malicious code in await-altair-got-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a660fc5e738c8d00b5f3881d89852c995e28e12b38ece3a1ead965d679ec57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142997 Malicious code in graphql-chai-schema-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8815d1a4d4f17193b365dff9a9095f12e31e182c8b4d9189ceeeb9f15874d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...