EUVD-2025-199511

Malicious code in @antstackio/express-graphql-proxy npm...

MAL-2025-191188 Malicious code in @antstackio/express-graphql-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ae25cf8547b5efb95597b0e90ea4105e03417563ff724dd9c720c49b4c52d2 The package @antstackio/express-graphql-proxy was found to contain malicious code. Source: google-open-source-security...

@antstackio/express-graphql-proxy (>=0.1.0 <=0.2.7), express-graphql-proxy (>=0.1.0 <=0.2.0) potentially affected by unknown CVE via @antstackio/graphql-body-parser (=0.1.0)

@antstackio/graphql-body-parser NPM version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @antstackio/graphql-body-parser and may be impacted: - @antstackio/express-graphql-proxy =0.1.0, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory:...