Malicious code in csrf-cressida-graphql-rest (npm)

Source: amazon-inspector 3f0f8102da823f1598bea95658a11ba091cd8ae0d45480aba1cafb8d24307920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cressida-graphql-apollo-gacrux (npm)

Source: amazon-inspector b3f4f524b48207e104601e6b13d2a0dce840d80d495500feae7448978e6eb474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-114875

Malicious code in cressida-graphql-apollo-gacrux npm...

EUVD-2025-114827

Malicious code in csrf-cressida-graphql-rest npm...