5327 matches found
Malicious code in graphql-registry-sedna-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43426488caa65ceaf277ae33df4839e7ebc26fd723dca2280a380133248433ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124881
Malicious code in miranda-graphql-hyperion-io npm...
EUVD-2025-114875
Malicious code in cressida-graphql-apollo-gacrux npm...
EUVD-2025-111477
Malicious code in magellan-graphql-levels-inquirer npm...
EUVD-2025-112459
Malicious code in inquirer-pm2-graphql-miranda npm...
EUVD-2025-123119
Malicious code in publish-polaris-graphql-rimraf npm...
MAL-2025-148653 Malicious code in thuban-graphql-backend-jupiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c95f79844ce145d2a3991132c10d022323b047eb69d35edbb4b4e3dfcc77f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pavo-graphql-leda-semantic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6523adc4e404cbe331811a878d4d2667af07aae668bf286e33c5611ffd5bef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121979
Malicious code in sirius-development-gemini-graphql npm...
EUVD-2025-122109
Malicious code in selenium-spawn-graphql-scripts npm...
EUVD-2025-113105
Malicious code in graphql-pegasus-yildun-reveal-md npm...
EUVD-2025-122575
Malicious code in rest-exec-graphql-algol npm...
Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in postcss-atlas-graphql-spectron-webdriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e1e09c839e7a8dd1bf2271918dfd6f0dffef915db2fca18e17edd957e22026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in altair-airbnb-graphql-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c76d50832dc7ab98677387bda1e24e8e43a74397e6dc03c9b59ea52ff4393cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113108
Malicious code in graphql-javascript-sedna-weywot npm...
EUVD-2025-113338
Malicious code in gacrux-nightwatch-nebula-graphql npm...
EUVD-2025-122455
Malicious code in rocket-graphql-ini-ini npm...