EUVD-2025-120186

Malicious code in xo-colors-helmet-apollo npm...

EUVD-2025-116611

Malicious code in apollo-aldebaran-restart-xanthus npm...

EUVD-2025-116579

Malicious code in apollo-non-blocking-local-csrf npm...

EUVD-2025-123095

Malicious code in pulsar-despina-apollo-cosmiconfig npm...

EUVD-2025-114875

Malicious code in cressida-graphql-apollo-gacrux npm...

Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115152

Malicious code in commitlint-config-angular-apollo-sequelize-karma npm...

EUVD-2025-123355

Malicious code in process-sagitta-public-apollo npm...

EUVD-2025-114050

Malicious code in enif-react-bootstrap-gravity-apollo npm...

Malicious code in apollo-fornax-mdx-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01371186693cd024e100ee510bb53e5d734a9461fbc86607990f005fe83045b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124359

Malicious code in nodejs-elektra-perseus-apollo npm...

Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115811

Malicious code in callback-avior-apollo-dorado npm...

Malicious code in apollo-blaze-rate-limiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105306c763841236f419b884919f6f97a6b63b25a0c00e39bd178d7a8c251e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112315

Malicious code in janus-apollo-alphard-acamar npm...

EUVD-2025-115390

Malicious code in charon-apollo-ganymede-zenobia npm...

EUVD-2025-115438

Malicious code in changelog-eris-apollo-cross-env npm...

EUVD-2025-111429

Malicious code in markdown-pdf-cache-apollo-cluster npm...

EUVD-2025-124341

Malicious code in nodemon-europa-apollo-markdown npm...

EUVD-2025-124681

Malicious code in mysql-apollo-ganymede-helios npm...