Malicious code in antares-bunyan-apollo-deimos (npm)

Source: amazon-inspector c2c64bc39e1aa26b38456721f22e94693806377129dbac49a767a3dbeb61f372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in alphard-ganymede-xanadu-apollo (npm)

The package alphard-ganymede-xanadu-apollo was found to contain malicious code. --- Credit: OpenSSF source...

ROOT-APP-NPM-CVE-2025-32030 CVE-2025-32030 in @apollo/gateway - Patched by Root

Root has patched CVE-2025-32030 in the @apollo/gateway package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-32031 CVE-2025-32031 in @apollo/gateway - Patched by Root

Root has patched CVE-2025-32031 in the @apollo/gateway package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-43414 CVE-2024-43414 in @apollo/gateway - Patched by Root

Root has patched CVE-2024-43414 in the @apollo/gateway package for Root:npm. Multiple fixed versions available...

Malicious Package

Overview algol-apollo-indus-extremophile is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious code in algol-apollo-indus-extremophile (npm)

Source: amazon-inspector 6cb9de9d2206a2c485bd77fef8f50c3fdea7fd3bf8bef75d8bd4efeee44ae990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in algol-apollo-dotenv-parse-variables-browserify (npm)

Source: amazon-inspector d5dbf3d57217d8a8fb345de059ba274eff8da19e26b131ff5780683b2ec9c167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in adonis-apex-docusaurus-apollo (npm)

Source: amazon-inspector dc98a74a3af4e2a01d84572d7920f29b7b94965c15aa269833d16a77ea18044d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in acamar-xanthus-apollo-solis (npm)

Source: amazon-inspector bab9a3fbabea8e9eda0274a512f0c48eb29716a7e17bb3f5383dbf3e01f197ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

PT-2026-86561

Root has patched GHSA-m8jr-fxqx-8xx6 in the @apollo/composition package for Root:npm. Multiple fixed versions available...

apollo-sdk (>=0.1.1, <=0.1.6), bell-nozzle-master (1.0.8) +5 more potentially affected by CVE-2026-15830 via django (4.1.2)

django PYPI version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - apollo-sdk =0.1.1, =3.11.6, =0.61.0, =0.62.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

Malware in @ornikar/apollo-link-timeout

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Exploit for CVE-2026-32621

CVE-2026-32621 - Apollo Federation Prototype Pollution PoC...

Apache Apollo Panel - Detect

Detects Apache Apollo Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Apache Apollo Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apache Apollo Panel - Detect', 'description':...

Apollo Sandbox UI - Exposed Detection

Detects the Apollo Sandbox developer interface exposed in production environments, which could facilitate schema discovery or testing by unauthorized users. !/usr/bin/env python3 -- coding: utf-8 -- """Detects the Apollo Sandbox developer interface exposed in production environments, which could...

WyreStorm Apollo VX20 - Information Disclosure Detection

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext credentials for the SoftAP access point Router /device/config using an HTTP GET request. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered on WyreStorm Apollo VX20...

Apollo Admin Service - Unauthenticated Access Detection

ApolloAdminservice was able to be accessed without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """ApolloAdminservice was able to be accessed without authentication.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Apollo Server GraphQL Introspection - Detect

Apollo Server GraphQL introspection was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Apollo Server GraphQL introspection was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Apollo Server GraphQL...