EUVD-2025-116597

Malicious code in apollo-docusaurus-postgres-kronos npm...

Malicious code in xo-colors-helmet-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03788d4a6215ff1f912ae8e05fe270c7fdc95fec963cfe2a986dd145ebc8908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114983

Malicious code in cors-hermes-apollo-scorpius npm...

EUVD-2025-123308

Malicious code in procyon-rehype-promise-apollo npm...

EUVD-2025-116585

Malicious code in apollo-jasmine-pegasus-aquarius npm...

EUVD-2025-123690

Malicious code in pino-pretty-comet-apollo-perseus npm...

EUVD-2025-116611

Malicious code in apollo-aldebaran-restart-xanthus npm...

EUVD-2025-120480

Malicious code in wezen-airbnb-apollo-nuxtjs npm...

EUVD-2025-123712

Malicious code in pino-apollo-radiant-tool npm...

Malicious code in rest-nebula-apollo-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0e592212057e4f165a5bc594516e43446e0dd16e1cd02b54fffe7ff5314842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-fornax-mdx-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01371186693cd024e100ee510bb53e5d734a9461fbc86607990f005fe83045b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111436

Malicious code in markdown-apollo-transform-ora npm...

EUVD-2025-121832

Malicious code in spawn-apollo-envconfig-jabbah npm...

EUVD-2025-116341

Malicious code in avior-apollo-oauth-dependencies npm...

EUVD-2025-111429

Malicious code in markdown-pdf-cache-apollo-cluster npm...

Malicious code in pino-apollo-radiant-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5f932b5ebb57daa130c09dd46c1291c44a6c1335243a2913ffd76e0abde8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114078

Malicious code in enceladus-pm2-metalsmith-apollo npm...

EUVD-2025-123376

Malicious code in process-apollo-axios-airbnb npm...

EUVD-2025-124767

Malicious code in mongoose-enif-apollo-eris npm...

EUVD-2025-116573

Malicious code in apollo-sedna-jupiter-weywot npm...