EUVD-2025-113454

Malicious code in fornax-umbriel-magellan-graphql npm...

EUVD-2025-123274

Malicious code in promise-rimraf-supervisor-graphql npm...

Malicious code in stop-flare-graphql-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39fd5efa47d0de28572480beb46c4b09366251f5981c1cbd75c0877711c8b1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121939

Malicious code in slides-graphql-markdown-pdf-dynamo npm...

EUVD-2025-121850

Malicious code in solis-graphql-figures-mysql npm...

EUVD-2025-123923

Malicious code in pavo-graphql-leda-semantic-ui npm...

EUVD-2025-113111

Malicious code in graphql-deimos-vulcan-helios npm...

EUVD-2025-120470

Malicious code in wezen-local-venus-graphql npm...

EUVD-2025-113116

Malicious code in graphql-cache-dactyl-meteor npm...

EUVD-2025-116105

Malicious code in betelgeuse-optimize-css-assets-webpack-plugin-graphql-neptune npm...

Malicious code in thuban-oauth-graphql-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bea268dfde784764d8a6760df49b436ccfb4a3c6881153cfd443747248420d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113108

Malicious code in graphql-javascript-sedna-weywot npm...

Malicious code in websockets-graphql-regulus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbbda8427ea6dbb869b1b65944d6ea5190110070e68da12643f4631637ca0a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-graphql-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6523adc4e404cbe331811a878d4d2667af07aae668bf286e33c5611ffd5bef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122575

Malicious code in rest-exec-graphql-algol npm...

EUVD-2025-123329

Malicious code in procyon-ganymede-foundation-graphql npm...

EUVD-2025-112022

Malicious code in jwt-webdriverio-pulsar-graphql npm...

Malicious code in vulcan-graphql-sadr-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28fd7869c1e84447ed5bb31e1a38bd35e970545d9af54c68a3ce47e58301765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120615

Malicious code in webdriver-manager-dione-graphql-public npm...

MAL-2025-148658 Malicious code in thuban-oauth-graphql-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bea268dfde784764d8a6760df49b436ccfb4a3c6881153cfd443747248420d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...