MAL-2025-139560 Malicious code in aquarius-webpack-apollo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa3d71e1d7a0e15bb88b0ed383e56df383ddcdda804b23c3df1115b266cab90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145694 Malicious code in nuxtjs-apollo-gulp-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6597f351418457f4a298e75a760f4998e77546742ce0037ebdfd07297dda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120480

Malicious code in wezen-airbnb-apollo-nuxtjs npm...

EUVD-2025-116599

Malicious code in apollo-cypress-hugo-capella npm...

EUVD-2025-121928

Malicious code in slides-supervisor-apollo-sync npm...

EUVD-2025-121624

Malicious code in stop-polaris-gravity-apollo npm...

EUVD-2025-124160

Malicious code in octans-apollo-google-parcel npm...

EUVD-2025-120749

Malicious code in vortex-apollo-meteor-fornax npm...

EUVD-2025-124341

Malicious code in nodemon-europa-apollo-markdown npm...

Malicious code in rest-nebula-apollo-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0e592212057e4f165a5bc594516e43446e0dd16e1cd02b54fffe7ff5314842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113920

Malicious code in eslint-config-apollo-uglify-js-metalsmith npm...

EUVD-2025-116583

Malicious code in apollo-library-metalsmith-tool npm...

EUVD-2025-114475

Malicious code in development-solis-cross-env-apollo npm...

Malicious code in subscription-apollo-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a045b40b3cf853afbaa7ab26e9964cb442500499698e1c895db995b6ca412f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114596

Malicious code in delphinus-browserify-playwright-apollo npm...

EUVD-2025-120750

Malicious code in vortex-apollo-luna-eris npm...

EUVD-2025-121170

Malicious code in transform-apollo-electron-despina npm...

EUVD-2025-116612

Malicious code in apollo-acamar-babel-neptune npm...

Malicious code in apollo-blaze-rate-limiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105306c763841236f419b884919f6f97a6b63b25a0c00e39bd178d7a8c251e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-comet-apollo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0fc55dc02578c07a1ca82888f7559c7f7490d510463dac842eddb8680878a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...