EUVD-2025-179343

Malicious code in dendrochronology-graphql-betelgeuse-acamar npm...

MAL-2025-187206 Malicious code in graphql-nightmare-css-loader-abiogenesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827a1eab8ee4f7a8518854247fd592f6a76ba721ba6900d144ce9f687b27a255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175837

Malicious code in umbra-iota-graphql-callback npm...

Malicious code in graphql-elektra-triton-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32d98eba6cf6a31eff8d8c5f67b0544f7ea9333a54ebdc237767280fcbcf553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178677

Malicious code in graphql-karma-cluster-mongodb npm...

EUVD-2025-175836

Malicious code in umbra-jekyll-foundation-graphql npm...

EUVD-2025-178126

Malicious code in less-loader-orbit-outercore-graphql npm...

EUVD-2025-178932

Malicious code in fermion-graphql-dorado-lynx npm...

EUVD-2025-178678

Malicious code in graphql-elektra-triton-transform npm...

EUVD-2025-178886

Malicious code in flare-ignite-graphql-eridanus npm...

EUVD-2025-179224

Malicious code in dysonswarm-apex-graphql-module npm...

EUVD-2025-178675

Malicious code in graphql-npm-soap-fermiparadox npm...

EUVD-2025-178676

Malicious code in graphql-nightmare-css-loader-abiogenesis npm...

EUVD-2025-177165

Malicious code in pino-pretty-yildun-express-graphql npm...

Malicious code in sqlite-oauth-quito-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca71d4114f8ae4468c127def1828c69d2b57565bf13761cb5938f72ffc59da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179103

Malicious code in epigenetics-graphql-tailwindcss-abiogenesis npm...

MAL-2025-187207 Malicious code in graphql-npm-soap-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56716e434cd1c5a44faa2761e4607685f3dc1bfd3de906c84be90f3ba243a05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179480

Malicious code in cryptography-biohacking-xml-graphql npm...

Malicious code in miranda-markdown-pdf-rate-limiter-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e691ac26ae0b92394354fcda674316914c8f0464d09a7681898100fb4da7308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Cross-site Request Forgery (CSRF)

Apollo Studio Embeddable Explorer & Embeddable Sandbox are vulnerable to cross-site request forgery CSRF. The vulnerability is due to missing origin validation in the client-side handling of window.postMessage events, which allows an attacker to send forged messages that trigger arbitrary GraphQL...