EUVD-2025-113613

Malicious code in firebase-frontend-apollo-perseus npm...

EUVD-2025-116593

Malicious code in apollo-element-ui-magellan-sedna npm...

EUVD-2025-116579

Malicious code in apollo-non-blocking-local-csrf npm...

EUVD-2025-122104

Malicious code in semantic-release-apollo-pyxis-changelog npm...

EUVD-2025-121288

Malicious code in thuban-apollo-sirius-yonder npm...

EUVD-2025-124865

Malicious code in miranda-repository-adonis-apollo npm...

EUVD-2025-112658

Malicious code in hydra-rimraf-apollo-gacrux npm...

EUVD-2025-116604

Malicious code in apollo-bunyan-gravity-altair npm...

Malicious code in farout-changelog-apollo-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c724dbf3bc227757e4c0bf560f5f7313bab426730af0b9d0c024502630d4c8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116602

Malicious code in apollo-command-prompts-electron npm...

MAL-2025-142720 Malicious code in fusion-apollo-style-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e697bff033a44314f01620f35bf49c622e6ce1d0f971103c8b1871fda65d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143301 Malicious code in hermes-apollo-gacrux-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5553bc927d985e5101e8ba0aacc171b45c30d4426c466bdf615f3db678e5f196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121624

Malicious code in stop-polaris-gravity-apollo npm...

EUVD-2025-116589

Malicious code in apollo-fornax-parcel-frontend npm...

Malicious code in callback-apollo-forever-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7996edf836737ab7f467291745cf1804def8903044963d1c9e7971d8f0e64cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114876

Malicious code in cressida-gatsby-sirius-apollo npm...

EUVD-2025-114556

Malicious code in deneb-proxima-apollo-mui npm...

EUVD-2025-122266

Malicious code in sails-nodemon-apollo-hugo npm...

EUVD-2025-112315

Malicious code in janus-apollo-alphard-acamar npm...

EUVD-2025-116583

Malicious code in apollo-library-metalsmith-tool npm...