MAL-2025-189583 Malicious code in solarnebula-betelgeuse-mui-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8de60c105978945920dc38697ecb14795c8f5a537a62627e59ecee7595ac8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187175 Malicious code in global-apollo-dysonswarm-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8624af2234afa89e899457b5b5c227d1c1b09212d1eb8b2a207d466c14a8b2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188271 Malicious code in nextjs-tachyon-apollo-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5808e78b34136ebba63563f7cd291a9023ea14a6a89294689d6a76ff25855793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187025 Malicious code in fork-winston-apollo-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c38fb3b8dce0d51fe097f114d49539610b5038bc08488ececd68bce2f3e0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Apollo Federation 安全漏洞

Apollo Federation is an architecture for the Apollo community to declaratively combine APIs into a unified graph. A security vulnerability exists in Apollo Federation versions prior to 2.9.5, prior to 2.10.4, prior to 2.11.5, and prior to 2.12.1, which stems from a flaw in the combination logic...

PT-2025-46925

Name of the Vulnerable Software and Affected Versions Apollo Federation versions prior to 2.9.5 Apollo Federation versions prior to 2.10.4 Apollo Federation versions prior to 2.11.5 Apollo Federation versions prior to 2.12.1 Description Apollo Federation is an architecture for composing APIs into...

MAL-2025-139519 Malicious code in apollo-library-metalsmith-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecec03d8c8bdb14d98763d0189b3a6b4d5c6faeadadd6bc349d8c5667fb9986c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139499 Malicious code in apollo-colors-hapi-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30be78f711f92871cf9ef17406d921ae42feb235c2054887bde10f6c7e489426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121577

Malicious code in subscription-apollo-hermes-spawn npm...

Malicious code in sedna-nightmare-global-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea5f9d9f5413f180107a6de4e14c1bf8cfb6eb40e53c220812579cb7b81df7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116611

Malicious code in apollo-aldebaran-restart-xanthus npm...

EUVD-2025-116590

Malicious code in apollo-fornax-mdx-eleventy npm...

EUVD-2025-114717

Malicious code in cypress-apollo-geckodriver-mongoose npm...

EUVD-2025-113709

Malicious code in farout-changelog-apollo-kaus npm...

EUVD-2025-116574

Malicious code in apollo-sails-vuepress-chai npm...

EUVD-2025-116661

Malicious code in antares-spectron-apollo-version npm...

EUVD-2025-115834

Malicious code in cache-halley-ini-apollo npm...

EUVD-2025-116580

Malicious code in apollo-nightwatch-jest-non-blocking npm...

EUVD-2025-116601

Malicious code in apollo-commitizen-koa-farout npm...

Malicious code in subscription-xml-jasmine-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eabecc43d01c8587b8f2f53eb45388a9476cf274b7a7c45c565f45dddd21bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...