EUVD-2025-111744

Malicious code in library-apollo-sagitta-relay npm...

EUVD-2025-111741

Malicious code in library-cassini-apollo-request npm...

EUVD-2025-111436

Malicious code in markdown-apollo-transform-ora npm...

EUVD-2025-111429

Malicious code in markdown-pdf-cache-apollo-cluster npm...

EUVD-2025-111345

Malicious code in mdx-miranda-apollo-nightwatch npm...

EUVD-2025-111217

Malicious code in meteor-apollo-upgrade-zenobia npm...

EUVD-2025-111216

Malicious code in meteor-apollo-xanadu-kinetic npm...

EUVD-2025-112658

Malicious code in hydra-rimraf-apollo-gacrux npm...

EUVD-2025-112552

Malicious code in indus-child-process-apollo-karma npm...

Malicious code in antares-spectron-apollo-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc69a052d9165b987f2a1a60e824aac161b9c771d669f25ae8259267dc1d7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-blaze-rate-limiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105306c763841236f419b884919f6f97a6b63b25a0c00e39bd178d7a8c251e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-colors-hapi-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30be78f711f92871cf9ef17406d921ae42feb235c2054887bde10f6c7e489426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-command-prompts-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aee3af8c6dc412fc7b594fac4ce1ea971aa6e50ba29153cb14e20aa1e6b645f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-deimos-resolvers-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ec7b46ef720beef5b501825b566d56e9bcc122d56d656cf82e0eea918a75a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-fornax-mdx-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01371186693cd024e100ee510bb53e5d734a9461fbc86607990f005fe83045b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-browserify-playwright-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7488bf1c84cac1534c0f648411101f77dfe5e87d49fa0fd80d42b09b61442089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-changelog-apollo-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c724dbf3bc227757e4c0bf560f5f7313bab426730af0b9d0c024502630d4c8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-apollo-style-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e697bff033a44314f01620f35bf49c622e6ce1d0f971103c8b1871fda65d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-hugo-apollo-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16946d8f8da98f1687d1b1461a244ac238e04e289dfe13b355f2cdc196d724c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-rimraf-apollo-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862ee4d81cec6ce838fc6610ce9041b85853f5d7b913a818c76b52999ae9d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...