Malicious code in orbit-xanthus-apollo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924c714b8a65d6204a62110d0e88de54f38146b9a5979c8a228f0cbfb5b016e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-command-prompts-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aee3af8c6dc412fc7b594fac4ce1ea971aa6e50ba29153cb14e20aa1e6b645f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121170

Malicious code in transform-apollo-electron-despina npm...

EUVD-2025-115064

Malicious code in configstore-apollo-mira-ariel npm...

EUVD-2025-124341

Malicious code in nodemon-europa-apollo-markdown npm...

Malicious code in apollo-blaze-rate-limiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105306c763841236f419b884919f6f97a6b63b25a0c00e39bd178d7a8c251e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147147 Malicious code in regulus-geckodriver-apollo-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86803956b94c8ff513b4ef9bea65fe82c6737e4b0244a4e7a7456162559bd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139525 Malicious code in apollo-rate-limiter-hermes-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ed5470b13fef8da440abc68f510f271994401493afb95ea428c871fd94bd3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147656 Malicious code in sails-nodemon-apollo-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c1304784231109d0525930d1103480a1961a3d2e7fcce0f5e2b0de7f553d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124480

Malicious code in nightmare-nightwatch-sagitta-apollo npm...

MAL-2025-140669 Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144770 Malicious code in mdx-miranda-apollo-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7684b2c1caccbc41129dd131debd88ef627e42a25ac781346f8d69986211f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141788 Malicious code in draco-apollo-arcturus-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 334f290cf81f2e9cde3da527c346dd097f89ac61d370ee906265eab329ee5e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149179 Malicious code in vortex-apollo-luna-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40a7b13b8ae9ef5abf8a3a983d8979e4b96529ff8dfde107ef9f83fa76537b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139499 Malicious code in apollo-colors-hapi-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30be78f711f92871cf9ef17406d921ae42feb235c2054887bde10f6c7e489426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114321

Malicious code in draco-apollo-arcturus-luna npm...

EUVD-2025-120186

Malicious code in xo-colors-helmet-apollo npm...

EUVD-2025-116578

Malicious code in apollo-quasar-hermes-dactyl npm...

EUVD-2025-121936

Malicious code in slides-loopback-remark-apollo npm...

EUVD-2025-122242

Malicious code in sass-loader-npm-markdownlint-apollo npm...