EUVD-2025-116590

Malicious code in apollo-fornax-mdx-eleventy npm...

Malicious code in vuetify-tool-markdown-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df5522b27f532b5a84611c13fc2498ead6787a837ac1cc588850e5b2f14bf20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115834

Malicious code in cache-halley-ini-apollo npm...

EUVD-2025-112811

Malicious code in hermes-apollo-gacrux-eleventy npm...

Malicious code in apollo-deimos-resolvers-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ec7b46ef720beef5b501825b566d56e9bcc122d56d656cf82e0eea918a75a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113142

Malicious code in google-testcafe-apollo-mysql npm...

EUVD-2025-116574

Malicious code in apollo-sails-vuepress-chai npm...

EUVD-2025-120888

Malicious code in ursa-apollo-version-readable npm...

EUVD-2025-116601

Malicious code in apollo-commitizen-koa-farout npm...

EUVD-2025-114078

Malicious code in enceladus-pm2-metalsmith-apollo npm...

Malicious code in orbit-xanthus-apollo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924c714b8a65d6204a62110d0e88de54f38146b9a5979c8a228f0cbfb5b016e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120887

Malicious code in ursa-apollo-xenon-europa npm...

Malicious code in subscription-xml-jasmine-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eabecc43d01c8587b8f2f53eb45388a9476cf274b7a7c45c565f45dddd21bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116580

Malicious code in apollo-nightwatch-jest-non-blocking npm...

MAL-2025-145947 Malicious code in parcel-apollo-framework-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea42becba6a089bebabca0dc3b4529b470bb588c4ad13b4ebd10402cbc0a618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149179 Malicious code in vortex-apollo-luna-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40a7b13b8ae9ef5abf8a3a983d8979e4b96529ff8dfde107ef9f83fa76537b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145001 Malicious code in mira-andromeda-csrf-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205dbb23936230601580aec44ec7ecae172b933acc677bca41f2c589c796f577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145303 Malicious code in nconf-apollo-ursa-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436dd8859e1f1b9fa7b1ea214fde2d84d4d19ab7b120dfd33ea32afc67345d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139496 Malicious code in apollo-blaze-rate-limiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105306c763841236f419b884919f6f97a6b63b25a0c00e39bd178d7a8c251e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139513 Malicious code in apollo-fornax-parcel-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4428990b52194111194eed7d777050d56daa9124b291ecad8271bf7dd940afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...