EUVD-2025-114875

Malicious code in cressida-graphql-apollo-gacrux npm...

EUVD-2025-122145

Malicious code in sedna-nightmare-global-apollo npm...

EUVD-2025-124319

Malicious code in non-blocking-apollo-proxima-enceladus npm...

EUVD-2025-114012

Malicious code in epimetheus-mini-css-extract-plugin-barnard-apollo npm...

EUVD-2025-116608

Malicious code in apollo-await-europa-markdown npm...

EUVD-2025-116838

Malicious code in airbnb-transform-apollo-terser-webpack-plugin npm...

Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124724

Malicious code in mui-apollo-transport-node-sass npm...

EUVD-2025-116603

Malicious code in apollo-colors-hapi-library npm...

EUVD-2025-112811

Malicious code in hermes-apollo-gacrux-eleventy npm...

EUVD-2025-111217

Malicious code in meteor-apollo-upgrade-zenobia npm...

Malicious code in mongodb-grus-despina-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb803ca4e42703dfb4576e1d080b3184c952880975f29de14f49945a4552af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113327

Malicious code in galaxy-apollo-phoebe-draco npm...

EUVD-2025-111246

Malicious code in metalsmith-apollo-mongodb-rimraf npm...

EUVD-2025-115390

Malicious code in charon-apollo-ganymede-zenobia npm...

EUVD-2025-115812

Malicious code in callback-apollo-forever-html-webpack-plugin npm...

EUVD-2025-122185

Malicious code in scripts-miranda-nconf-apollo npm...

EUVD-2025-111273

Malicious code in mensa-apollo-firebase-lint-staged npm...

Malicious code in mdx-miranda-apollo-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7684b2c1caccbc41129dd131debd88ef627e42a25ac781346f8d69986211f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-apex-docusaurus-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc98a74a3af4e2a01d84572d7920f29b7b94965c15aa269833d16a77ea18044d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...