EUVD-2025-112770

Malicious code in hexo-hugo-apollo-kronos npm...

EUVD-2025-120888

Malicious code in ursa-apollo-version-readable npm...

EUVD-2025-116570

Malicious code in apollo-ursa-tailwindcss-uglify-js npm...

EUVD-2025-116601

Malicious code in apollo-commitizen-koa-farout npm...

EUVD-2025-114050

Malicious code in enif-react-bootstrap-gravity-apollo npm...

EUVD-2025-124792

Malicious code in mongodb-element-ui-apollo-hermes npm...

EUVD-2025-122175

Malicious code in scripts-semantic-release-galaxy-apollo npm...

Malicious code in regulus-geckodriver-apollo-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86803956b94c8ff513b4ef9bea65fe82c6737e4b0244a4e7a7456162559bd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-repository-adonis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1603d4b742f0b3f24eeee1437a14a2801933ddc0b97820f8c2340a117e1eba1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-apollo-xanadu-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2454fb08bff143bdb22e629949a840c5de75841dc857d9fa4fe7a85ba4c4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-apollo-gacrux-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5519f459b0ae7839ec0ab31389af3597e630d33968dd80b319073346517cae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120977

Malicious code in uninstall-apollo-gacrux-dependencies npm...

Malicious code in apollo-colors-hapi-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30be78f711f92871cf9ef17406d921ae42feb235c2054887bde10f6c7e489426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121577

Malicious code in subscription-apollo-hermes-spawn npm...

MAL-2025-139496 Malicious code in apollo-blaze-rate-limiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105306c763841236f419b884919f6f97a6b63b25a0c00e39bd178d7a8c251e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145694 Malicious code in nuxtjs-apollo-gulp-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6597f351418457f4a298e75a760f4998e77546742ce0037ebdfd07297dda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144898 Malicious code in meteor-apollo-upgrade-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6297cc76699859130e9718018440cd30c840913c432fca2c2f56741aa440712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139530 Malicious code in apollo-server-terser-webpack-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242351a23e7cfbb27df8dcfbf0a3ce9e20b76ec9c4b6267b770b2fa7c8a05448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145303 Malicious code in nconf-apollo-ursa-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436dd8859e1f1b9fa7b1ea214fde2d84d4d19ab7b120dfd33ea32afc67345d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145947 Malicious code in parcel-apollo-framework-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea42becba6a089bebabca0dc3b4529b470bb588c4ad13b4ebd10402cbc0a618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...