EUVD-2025-114012

Malicious code in epimetheus-mini-css-extract-plugin-barnard-apollo npm...

EUVD-2025-116608

Malicious code in apollo-await-europa-markdown npm...

EUVD-2025-115390

Malicious code in charon-apollo-ganymede-zenobia npm...

Malicious code in apollo-blaze-rate-limiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105306c763841236f419b884919f6f97a6b63b25a0c00e39bd178d7a8c251e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115812

Malicious code in callback-apollo-forever-html-webpack-plugin npm...

EUVD-2025-122185

Malicious code in scripts-miranda-nconf-apollo npm...

Malicious code in mdx-miranda-apollo-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7684b2c1caccbc41129dd131debd88ef627e42a25ac781346f8d69986211f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111273

Malicious code in mensa-apollo-firebase-lint-staged npm...

Malicious code in orbit-xanthus-apollo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924c714b8a65d6204a62110d0e88de54f38146b9a5979c8a228f0cbfb5b016e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147656 Malicious code in sails-nodemon-apollo-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c1304784231109d0525930d1103480a1961a3d2e7fcce0f5e2b0de7f553d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139525 Malicious code in apollo-rate-limiter-hermes-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ed5470b13fef8da440abc68f510f271994401493afb95ea428c871fd94bd3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140669 Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144770 Malicious code in mdx-miranda-apollo-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7684b2c1caccbc41129dd131debd88ef627e42a25ac781346f8d69986211f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149179 Malicious code in vortex-apollo-luna-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40a7b13b8ae9ef5abf8a3a983d8979e4b96529ff8dfde107ef9f83fa76537b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139499 Malicious code in apollo-colors-hapi-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30be78f711f92871cf9ef17406d921ae42feb235c2054887bde10f6c7e489426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141788 Malicious code in draco-apollo-arcturus-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 334f290cf81f2e9cde3da527c346dd097f89ac61d370ee906265eab329ee5e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-tool-markdown-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df5522b27f532b5a84611c13fc2498ead6787a837ac1cc588850e5b2f14bf20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-fornax-mdx-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01371186693cd024e100ee510bb53e5d734a9461fbc86607990f005fe83045b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114321

Malicious code in draco-apollo-arcturus-luna npm...