EUVD-2025-113338

Malicious code in gacrux-nightwatch-nebula-graphql npm...

EUVD-2025-123119

Malicious code in publish-polaris-graphql-rimraf npm...

Malicious code in graphql-registry-sedna-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43426488caa65ceaf277ae33df4839e7ebc26fd723dca2280a380133248433ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124073

Malicious code in ophiuchus-vega-xml-graphql npm...

EUVD-2025-116331

Malicious code in avior-jasmine-graphql-equinox npm...

EUVD-2025-113104

Malicious code in graphql-registry-sedna-configstore npm...

EUVD-2025-115270

Malicious code in cluster-upgrade-graphql-quantum npm...

EUVD-2025-113335

Malicious code in gacrux-phoebe-graphql-dagda npm...

EUVD-2025-121630

Malicious code in stop-flare-graphql-webdriverio npm...

EUVD-2025-122120

Malicious code in selenium-hapi-graphql-convict npm...

Malicious code in altair-chai-transform-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e57b70246ceb72a49720b47e3ecfd3567bcccae73b01aba9d723cd8ba9b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-dione-graphql-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6fa48966204e7e4ec2f499960681d755ac463ce41b39eb2a6f9dc1921223fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120507

Malicious code in websockets-graphql-regulus-canopus npm...

Malicious code in thuban-graphql-backend-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c95f79844ce145d2a3991132c10d022323b047eb69d35edbb4b4e3dfcc77f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116757

Malicious code in altair-airbnb-graphql-transform npm...

Malicious code in graphql-cordelia-flare-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c569d1055906f1a8d85265083113aef012a036c83d606bdc7b82d327b4c349e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114833

Malicious code in cross-env-yakutsk-octans-graphql npm...

MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147986 Malicious code in slides-graphql-markdown-pdf-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e875d6758d07bb506554c8efb933ea288df266b933847f0fdb34e06da7e69b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145078 Malicious code in mocha-graphql-alphard-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863ae61cac71de360191dd6072306001b2bb6392cf8b16e63c7085e2d018ac6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...