3482 matches found
MAL-2025-142777 Malicious code in gacrux-phoebe-graphql-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f68c04258710a2b6f395d4cf50b5517baaf63d917dbd72a928d9bf32e8bb1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in graphql-umbriel-enceladus-umbriel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95df253aa63bcd8287944401dcbc32701f552deeffcf87cb251266f1c84051c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120694
Malicious code in vulcan-graphql-sadr-leda npm...
EUVD-2025-111238
Malicious code in metalsmith-graphql-pegasus-hermes npm...
MAL-2025-143797 Malicious code in janus-apex-writable-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfdc92c35108b7bac99e9f035fd519cc20125241b0a253c8541000e44936d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148658 Malicious code in thuban-oauth-graphql-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bea268dfde784764d8a6760df49b436ccfb4a3c6881153cfd443747248420d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148653 Malicious code in thuban-graphql-backend-jupiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c95f79844ce145d2a3991132c10d022323b047eb69d35edbb4b4e3dfcc77f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145012 Malicious code in mira-oauth-graphql-airbnb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd666d7a3a56d61d6f5aaaadba57754e6def4f1ffc6d210c12b9da72eccc0b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121850
Malicious code in solis-graphql-figures-mysql npm...
MAL-2025-139345 Malicious code in altair-airbnb-graphql-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c76d50832dc7ab98677387bda1e24e8e43a74397e6dc03c9b59ea52ff4393cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143654 Malicious code in inquirer-pm2-graphql-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964a75711a342b3eb5fc2ab4d78f2cf2af03901b2758dbe99095253d8708e938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113818
Malicious code in europa-sirius-graphql-got npm...
EUVD-2025-116783
Malicious code in alphard-cassini-graphql-warp npm...
EUVD-2025-116273
Malicious code in axios-graphql-umbriel-uglify-js npm...
EUVD-2025-112970
Malicious code in halley-graphql-europa-eridanus npm...
Malicious code in process-mysql-graphql-achernar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce30421baf221f5039852b56fa71beb90736340eb15021cdb3e1155efa5bad6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113588
Malicious code in flare-commitizen-graphql-barnard npm...
Malicious code in halley-graphql-miranda-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294a60f8bc8353187fcdc637762aa04ae29fba73de6a28272a0e39cffb15dd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...