EUVD-2025-116783

Malicious code in alphard-cassini-graphql-warp npm...

EUVD-2025-115055

Malicious code in configstore-graphql-pm2-virgo npm...

EUVD-2025-120575

Malicious code in webdriver-mocha-lint-redis-graphql npm...

EUVD-2025-116490

Malicious code in astro-oberon-airbnb-graphql npm...

EUVD-2025-123890

Malicious code in pegasus-graphql-playwright-husky npm...

EUVD-2025-113588

Malicious code in flare-commitizen-graphql-barnard npm...

Malicious code in halley-graphql-miranda-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294a60f8bc8353187fcdc637762aa04ae29fba73de6a28272a0e39cffb15dd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116164

Malicious code in bellatrix-graphql-lynx-nova npm...

EUVD-2025-113099

Malicious code in graphql-vuepress-husky-bellatrix npm...

Malicious code in magellan-graphql-levels-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20526f5014eee97ee2e57fd6f52681ed6681877adc4ebeefb396c9d8ff23adea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-graphql-playwright-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9485849dcf43ce232720e15f229be2925398be484ea117e2cc67c5e107784b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121849

Malicious code in solis-graphql-postgres-luna npm...

EUVD-2025-113105

Malicious code in graphql-pegasus-yildun-reveal-md npm...

EUVD-2025-112001

Malicious code in karma-kronos-protractor-graphql npm...

Malicious code in postcss-atlas-graphql-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e1e09c839e7a8dd1bf2271918dfd6f0dffef915db2fca18e17edd957e22026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122109

Malicious code in selenium-spawn-graphql-scripts npm...

EUVD-2025-116273

Malicious code in axios-graphql-umbriel-uglify-js npm...

EUVD-2025-113110

Malicious code in graphql-enceladus-meteor-jasmine npm...

EUVD-2025-114875

Malicious code in cressida-graphql-apollo-gacrux npm...

MAL-2025-142997 Malicious code in graphql-chai-schema-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8815d1a4d4f17193b365dff9a9095f12e31e182c8b4d9189ceeeb9f15874d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...