1802 matches found
Malicious code in apollo-webdriver-manager-jasmine-wasat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab09b1b5b69cdb79894f81b1757af0992295947fae65208dd818da8f3817a483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180129
Malicious code in baryon-helmet-apollo-meteor npm...
EUVD-2025-180391
Malicious code in apollo-areology-tardigrade-tailwindcss npm...
EUVD-2025-180425
Malicious code in antares-bunyan-apollo-deimos npm...
EUVD-2025-180390
Malicious code in apollo-ceres-package-cors npm...
EUVD-2025-176487
Malicious code in scripts-jabbah-apollo-phenomic npm...
EUVD-2025-178230
Malicious code in jwt-ursa-apollo-fornax npm...
EUVD-2025-180379
Malicious code in apollo-spinner-solis-rigel npm...
Malicious code in envconfig-apollo-dependencies-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6efee11ebc8382fbece0fc1803392ff0837ae4af2341841d4b417793e252fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in geckodriver-nebula-spawn-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0f439f3314d535195f43a58fea27de3a38211dbd7367c379d737eb31a99b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in antares-bunyan-apollo-deimos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c64bc39e1aa26b38456721f22e94693806377129dbac49a767a3dbeb61f372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Apollo Federation security vulnerabilities
Apollo Federation is an architecture for the Apollo community to declaratively combine APIs into a unified graph. A security vulnerability exists in Apollo Federation versions prior to 2.9.5, prior to 2.10.4, prior to 2.11.5, and prior to 2.12.1, which stems from a flaw in the combination logic...
CVE-2025-64530: Authentication Bypass Using an Alternate Path or Channel
Apollo Federation is an architecture for declaratively composing APIs into a unified graph. A vulnerability in versions of Apollo Federation's composition logic prior to 2.9.5, 2.10.4, 2.11.5, and 2.12.1 allowed some queries to Apollo Router to improperly bypass access controls on types/fields...
PT-2025-46925
Name of the Vulnerable Software and Affected Versions Apollo Federation versions prior to 2.9.5 Apollo Federation versions prior to 2.10.4 Apollo Federation versions prior to 2.11.5 Apollo Federation versions prior to 2.12.1 Description Apollo Federation is an architecture for composing APIs into...
EUVD-2025-120889
Malicious code in ursa-apollo-mutation-blaze npm...
EUVD-2025-120887
Malicious code in ursa-apollo-xenon-europa npm...
EUVD-2025-120624
Malicious code in wasat-warp-apollo-leda npm...
EUVD-2025-120487
Malicious code in weywot-nightwatch-parcel-apollo npm...