EUVD-2025-124318

Malicious code in non-blocking-auriga-inquirer-graphql npm...

MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113103

Malicious code in graphql-selenium-antares-luna npm...

EUVD-2025-113335

Malicious code in gacrux-phoebe-graphql-dagda npm...

EUVD-2025-122158

Malicious code in sedna-graphql-figures-nodejs npm...

Malicious code in uninstall-inquirer-vega-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8846698d2269baaf706f6c548dd31f7d4b3192fef4ecf20829d9cc8bbac472a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124073

Malicious code in ophiuchus-vega-xml-graphql npm...

EUVD-2025-112459

Malicious code in inquirer-pm2-graphql-miranda npm...

Malicious code in altair-chai-transform-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e57b70246ceb72a49720b47e3ecfd3567bcccae73b01aba9d723cd8ba9b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-jasmine-graphql-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3d3277b27acc95161a9bde05520193ebd02caf5c93f00665e5f2c50240f7fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-graphql-pm2-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df4450f2fb42c74059bdf2515b13d9ec227be42735da764c21f0c090c58f9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-cache-dactyl-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c89e45b27de330b847c8bce6f45bfee848d5d30bb49965b5d63299d0e86ae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-cordelia-flare-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c569d1055906f1a8d85265083113aef012a036c83d606bdc7b82d327b4c349e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-dione-graphql-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6fa48966204e7e4ec2f499960681d755ac463ce41b39eb2a6f9dc1921223fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113100

Malicious code in graphql-virgo-prettier-ursa npm...

EUVD-2025-113076

Malicious code in gridsome-css-minimizer-webpack-plugin-graphql-cors npm...

EUVD-2025-114833

Malicious code in cross-env-yakutsk-octans-graphql npm...

EUVD-2025-115869

Malicious code in bulma-webdriver-mocha-chariklo-graphql npm...

MAL-2025-147986 Malicious code in slides-graphql-markdown-pdf-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e875d6758d07bb506554c8efb933ea288df266b933847f0fdb34e06da7e69b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...