MAL-2025-185505 Malicious code in apollo-nodejs-helmet-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f8efa0ddd24ff187a77bfbf2653e94f12a622525a7c6ac90cd8bb470c36f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-xml-jasmine-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eabecc43d01c8587b8f2f53eb45388a9476cf274b7a7c45c565f45dddd21bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-41271 Malicious code in apollo-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d475a426c61513aa519a888a0b2e6968223fdcf3b3ea86c39f8bd0777207c40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...