Malicious code in auth0-sociobiology-apollo-umbra (npm)

Source: amazon-inspector b2cc66bc3119f641f4265e679da99e399682b5bcfac97ff78b266bd68c7b2025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in auth0-apollo-astro-eclipse (npm)

The package auth0-apollo-astro-eclipse was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in auth-apollo-geckodriver-package (npm)

The package auth-apollo-geckodriver-package was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in async-apollo-standard-child-process (npm)

The package async-apollo-standard-child-process was found to contain malicious code. --- Credit: OpenSSF source...

ROOT-APP-NPM-CVE-2026-23897 CVE-2026-23897 in @apollo/server - Patched by Root

Root has patched CVE-2026-23897 in the @apollo/server package for Root:npm. Multiple fixed versions available...

Malicious code in archaeoastronomy-hugo-playwright-apollo (npm)

The package archaeoastronomy-hugo-playwright-apollo was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in aquarius-webpack-apollo-xanthus (npm)

Source: amazon-inspector 8aa3d71e1d7a0e15bb88b0ed383e56df383ddcdda804b23c3df1115b266cab90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in apollo-server-terser-webpack-plugin-quantum (npm)

Source: amazon-inspector 242351a23e7cfbb27df8dcfbf0a3ce9e20b76ec9c4b6267b770b2fa7c8a05448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in apollo-quasar-hermes-dactyl (npm)

Source: amazon-inspector 652e2d076c3ee69316f7b51ec59ecd9c44accaccb4af2c046cfab5c66c5133e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in apollo-sails-vuepress-chai (npm)

Source: amazon-inspector 2600fdd1db616c71ebd3fbd09b07af44dc86936736bf6eb4e5b68c0bccf269fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in apollo-palynology-hydrogeology-relay (npm)

The package apollo-palynology-hydrogeology-relay was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in apollo-redgiant-kardashevscale-pino (npm)

Source: amazon-inspector 08788ceaa486e98ffd1ab8b7ffb4dece829bf89d4a6f7042306de6eafa7c0ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in apollo-yakutsk-paleoanthropology-aurora (npm)

The package apollo-yakutsk-paleoanthropology-aurora was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in apollo-webdriver-manager-jasmine-wasat (npm)

Source: amazon-inspector ab09b1b5b69cdb79894f81b1757af0992295947fae65208dd818da8f3817a483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in apollo-spectron-cladistics-geochemistry (npm)

The package apollo-spectron-cladistics-geochemistry was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in apollo-nodejs-helmet-loglevel (npm)

Source: amazon-inspector 03f8efa0ddd24ff187a77bfbf2653e94f12a622525a7c6ac90cd8bb470c36f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in apollo-repository-uglify-js-nextjs (npm)

Source: amazon-inspector 5f9450e460da60e016b7b255ddec614b5fe0154f3e89ef1ab9d4185ec78b6a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in apollo-readable-iota-bulma (npm)

Source: amazon-inspector e111ef389f148ced4346b44133166249bcdcf8a66f281191f55cac8374e6c859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in apollo-nightwatch-xanadu-iota (npm)

The package apollo-nightwatch-xanadu-iota was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in apollo-ursa-tailwindcss-uglify-js (npm)

Source: amazon-inspector 07c5055c4409c3fb1e231a35760c7bde61d90da1af4606587d4ebb0be38a6c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...