4817 matches found
EUVD-2025-179343
Malicious code in dendrochronology-graphql-betelgeuse-acamar npm...
Malicious code in sqlite-oauth-quito-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca71d4114f8ae4468c127def1828c69d2b57565bf13761cb5938f72ffc59da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187206 Malicious code in graphql-nightmare-css-loader-abiogenesis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827a1eab8ee4f7a8518854247fd592f6a76ba721ba6900d144ce9f687b27a255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175837
Malicious code in umbra-iota-graphql-callback npm...
EUVD-2025-179959
Malicious code in buffer-package-bionics-graphql npm...
EUVD-2025-178677
Malicious code in graphql-karma-cluster-mongodb npm...
EUVD-2025-175836
Malicious code in umbra-jekyll-foundation-graphql npm...
EUVD-2025-178932
Malicious code in fermion-graphql-dorado-lynx npm...
EUVD-2025-178126
Malicious code in less-loader-orbit-outercore-graphql npm...
EUVD-2025-178678
Malicious code in graphql-elektra-triton-transform npm...
EUVD-2025-178675
Malicious code in graphql-npm-soap-fermiparadox npm...
EUVD-2025-178676
Malicious code in graphql-nightmare-css-loader-abiogenesis npm...
EUVD-2025-177165
Malicious code in pino-pretty-yildun-express-graphql npm...
EUVD-2025-179103
Malicious code in epigenetics-graphql-tailwindcss-abiogenesis npm...
MAL-2025-187207 Malicious code in graphql-npm-soap-fermiparadox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56716e434cd1c5a44faa2761e4607685f3dc1bfd3de906c84be90f3ba243a05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Cross-site Request Forgery (CSRF)
Apollo Studio Embeddable Explorer & Embeddable Sandbox are vulnerable to cross-site request forgery CSRF. The vulnerability is due to missing origin validation in the client-side handling of window.postMessage events, which allows an attacker to send forged messages that trigger arbitrary GraphQL...
EUVD-2025-114833
Malicious code in cross-env-yakutsk-octans-graphql npm...
EUVD-2025-121850
Malicious code in solis-graphql-figures-mysql npm...