EUVD-2025-124881

Malicious code in miranda-graphql-hyperion-io npm...

EUVD-2025-114875

Malicious code in cressida-graphql-apollo-gacrux npm...

EUVD-2025-111477

Malicious code in magellan-graphql-levels-inquirer npm...

EUVD-2025-112459

Malicious code in inquirer-pm2-graphql-miranda npm...

EUVD-2025-123119

Malicious code in publish-polaris-graphql-rimraf npm...

MAL-2025-148653 Malicious code in thuban-graphql-backend-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c95f79844ce145d2a3991132c10d022323b047eb69d35edbb4b4e3dfcc77f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-graphql-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6523adc4e404cbe331811a878d4d2667af07aae668bf286e33c5611ffd5bef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121979

Malicious code in sirius-development-gemini-graphql npm...

EUVD-2025-122109

Malicious code in selenium-spawn-graphql-scripts npm...

EUVD-2025-113105

Malicious code in graphql-pegasus-yildun-reveal-md npm...

EUVD-2025-122575

Malicious code in rest-exec-graphql-algol npm...

Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-atlas-graphql-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e1e09c839e7a8dd1bf2271918dfd6f0dffef915db2fca18e17edd957e22026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-airbnb-graphql-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c76d50832dc7ab98677387bda1e24e8e43a74397e6dc03c9b59ea52ff4393cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113108

Malicious code in graphql-javascript-sedna-weywot npm...

EUVD-2025-113338

Malicious code in gacrux-nightwatch-nebula-graphql npm...

EUVD-2025-122455

Malicious code in rocket-graphql-ini-ini npm...

EUVD-2025-113112

Malicious code in graphql-cordelia-flare-slidev npm...

EUVD-2025-116331

Malicious code in avior-jasmine-graphql-equinox npm...

MAL-2025-141276 Malicious code in cross-env-yakutsk-octans-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec258cbc55d95a4aa0c35968e62956f226510e7535d823debd9ec5c976ed91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...