1273 matches found
MAL-2025-185503 Malicious code in apollo-geochronology-stream-readable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1853cf9a3f20a918e290a6d47a2239df7fb6e98aac8909d1af2210c7b228b0b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186331 Malicious code in cosmiconfig-perseus-redgiant-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8cabf74a61f50af9ee6fb8098d25d2c08526d5b73a3c74ec59e714ad4cb37b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187175 Malicious code in global-apollo-dysonswarm-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8624af2234afa89e899457b5b5c227d1c1b09212d1eb8b2a207d466c14a8b2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188271 Malicious code in nextjs-tachyon-apollo-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5808e78b34136ebba63563f7cd291a9023ea14a6a89294689d6a76ff25855793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189583 Malicious code in solarnebula-betelgeuse-mui-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8de60c105978945920dc38697ecb14795c8f5a537a62627e59ecee7595ac8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187118 Malicious code in gatsby-apollo-sync-lyra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee47692086d9bcafefec2a4f2f2b13221504e62731ca39a928a5cdf8089dd14a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187025 Malicious code in fork-winston-apollo-yaml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c38fb3b8dce0d51fe097f114d49539610b5038bc08488ececd68bce2f3e0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in antares-bunyan-apollo-deimos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c64bc39e1aa26b38456721f22e94693806377129dbac49a767a3dbeb61f372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Apollo Federation 安全漏洞
Apollo Federation is an architecture for the Apollo community to declaratively combine APIs into a unified graph. A security vulnerability exists in Apollo Federation versions prior to 2.9.5, prior to 2.10.4, prior to 2.11.5, and prior to 2.12.1, which stems from a flaw in the combination logic...
PT-2025-46925
Name of the Vulnerable Software and Affected Versions Apollo Federation versions prior to 2.9.5 Apollo Federation versions prior to 2.10.4 Apollo Federation versions prior to 2.11.5 Apollo Federation versions prior to 2.12.1 Description Apollo Federation is an architecture for composing APIs into...
EUVD-2025-116577
Malicious code in apollo-rate-limiter-hermes-atlas npm...
EUVD-2025-116596
Malicious code in apollo-dotenv-safe-adonis-slidev npm...
EUVD-2025-116606
Malicious code in apollo-blaze-rate-limiter-vega npm...
EUVD-2025-116578
Malicious code in apollo-quasar-hermes-dactyl npm...
EUVD-2025-120707
Malicious code in vuetify-tool-markdown-apollo npm...
EUVD-2025-116542
Malicious code in aquarius-webpack-apollo-xanthus npm...
EUVD-2025-116607
Malicious code in apollo-backend-callback-cordelia npm...
EUVD-2025-121411
Malicious code in terser-eslint-apollo-hercules npm...