EUVD-2025-124791

Malicious code in mongodb-europa-apollo-envconfig npm...

MAL-2025-147656 Malicious code in sails-nodemon-apollo-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c1304784231109d0525930d1103480a1961a3d2e7fcce0f5e2b0de7f553d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116604

Malicious code in apollo-bunyan-gravity-altair npm...

MAL-2025-140669 Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145694 Malicious code in nuxtjs-apollo-gulp-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6597f351418457f4a298e75a760f4998e77546742ce0037ebdfd07297dda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147147 Malicious code in regulus-geckodriver-apollo-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86803956b94c8ff513b4ef9bea65fe82c6737e4b0244a4e7a7456162559bd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143301 Malicious code in hermes-apollo-gacrux-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5553bc927d985e5101e8ba0aacc171b45c30d4426c466bdf615f3db678e5f196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149041 Malicious code in ursa-apollo-version-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5eb449d68a1a78b9ec331359f8f01997194d27f618af0a73724e5259164277c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111744

Malicious code in library-apollo-sagitta-relay npm...

EUVD-2025-116597

Malicious code in apollo-docusaurus-postgres-kronos npm...

MAL-2025-142060 Malicious code in enif-react-bootstrap-gravity-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7366c6b2b849d14ce39d70c33c2606bc5ee97e6c0656befc2c46757026a36cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139560 Malicious code in aquarius-webpack-apollo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa3d71e1d7a0e15bb88b0ed383e56df383ddcdda804b23c3df1115b266cab90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148059 Malicious code in socketio-meteor-warp-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1968894fa7e96f8475532a15681d64684abb98aeeffeda42d690bad5dbdf93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124681

Malicious code in mysql-apollo-ganymede-helios npm...

EUVD-2025-121928

Malicious code in slides-supervisor-apollo-sync npm...

EUVD-2025-121624

Malicious code in stop-polaris-gravity-apollo npm...

EUVD-2025-124160

Malicious code in octans-apollo-google-parcel npm...

EUVD-2025-120749

Malicious code in vortex-apollo-meteor-fornax npm...

EUVD-2025-124341

Malicious code in nodemon-europa-apollo-markdown npm...

Malicious code in rest-nebula-apollo-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0e592212057e4f165a5bc594516e43446e0dd16e1cd02b54fffe7ff5314842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...