MAL-2025-145012 Malicious code in mira-oauth-graphql-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd666d7a3a56d61d6f5aaaadba57754e6def4f1ffc6d210c12b9da72eccc0b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113116

Malicious code in graphql-cache-dactyl-meteor npm...

EUVD-2025-111477

Malicious code in magellan-graphql-levels-inquirer npm...

EUVD-2025-111238

Malicious code in metalsmith-graphql-pegasus-hermes npm...

EUVD-2025-111140

Malicious code in mini-css-extract-plugin-graphql-karma-nodejs npm...

EUVD-2025-112022

Malicious code in jwt-webdriverio-pulsar-graphql npm...

Malicious code in bulma-webdriver-mocha-chariklo-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f76f4befed367725c54fd0a28c5edda5b5d5e711a7c93746a910206e99aaaea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-umbriel-enceladus-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95df253aa63bcd8287944401dcbc32701f552deeffcf87cb251266f1c84051c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-graphql-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6523adc4e404cbe331811a878d4d2667af07aae668bf286e33c5611ffd5bef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-flare-graphql-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39fd5efa47d0de28572480beb46c4b09366251f5981c1cbd75c0877711c8b1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-oauth-graphql-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bea268dfde784764d8a6760df49b436ccfb4a3c6881153cfd443747248420d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-graphql-sadr-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28fd7869c1e84447ed5bb31e1a38bd35e970545d9af54c68a3ce47e58301765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-graphql-regulus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbbda8427ea6dbb869b1b65944d6ea5190110070e68da12643f4631637ca0a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113108

Malicious code in graphql-javascript-sedna-weywot npm...

EUVD-2025-112969

Malicious code in halley-graphql-miranda-changelog npm...

EUVD-2025-115359

Malicious code in child-process-graphql-unuk-bootstrap npm...

EUVD-2025-115107

Malicious code in concurrently-async-graphql-triton npm...

EUVD-2025-116105

Malicious code in betelgeuse-optimize-css-assets-webpack-plugin-graphql-neptune npm...

EUVD-2025-116834

Malicious code in aldebaran-bootstrap-mensa-graphql npm...

MAL-2025-142777 Malicious code in gacrux-phoebe-graphql-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f68c04258710a2b6f395d4cf50b5517baaf63d917dbd72a928d9bf32e8bb1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...