EUVD-2025-116583

Malicious code in apollo-library-metalsmith-tool npm...

MAL-2025-139519 Malicious code in apollo-library-metalsmith-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecec03d8c8bdb14d98763d0189b3a6b4d5c6faeadadd6bc349d8c5667fb9986c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in speleology-apollo-library-thuban (npm)

The package speleology-apollo-library-thuban was found to contain malicious code...

CVE-2023-30959

In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction...