5925 matches found
MAL-2025-148658 Malicious code in thuban-oauth-graphql-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bea268dfde784764d8a6760df49b436ccfb4a3c6881153cfd443747248420d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148653 Malicious code in thuban-graphql-backend-jupiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c95f79844ce145d2a3991132c10d022323b047eb69d35edbb4b4e3dfcc77f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120694
Malicious code in vulcan-graphql-sadr-leda npm...
EUVD-2025-120615
Malicious code in webdriver-manager-dione-graphql-public npm...
EUVD-2025-121939
Malicious code in slides-graphql-markdown-pdf-dynamo npm...
EUVD-2025-122455
Malicious code in rocket-graphql-ini-ini npm...
EUVD-2025-123428
Malicious code in prettier-plugin-markdown-sails-process-graphql npm...
EUVD-2025-123329
Malicious code in procyon-ganymede-foundation-graphql npm...
EUVD-2025-123923
Malicious code in pavo-graphql-leda-semantic-ui npm...
EUVD-2025-124881
Malicious code in miranda-graphql-hyperion-io npm...
EUVD-2025-124840
Malicious code in mocha-graphql-alphard-sirius npm...
MAL-2025-144877 Malicious code in metalsmith-graphql-pegasus-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17541e872a174d77d0112b013ca7a42e843793669c3082e2c94fd27cdf7dfa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143654 Malicious code in inquirer-pm2-graphql-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964a75711a342b3eb5fc2ab4d78f2cf2af03901b2758dbe99095253d8708e938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123274
Malicious code in promise-rimraf-supervisor-graphql npm...
EUVD-2025-114616
Malicious code in deimos-graphql-procyon-aurora npm...
EUVD-2025-122575
Malicious code in rest-exec-graphql-algol npm...
EUVD-2025-114378
Malicious code in dotenv-parse-variables-phoebe-procyon-graphql npm...
EUVD-2025-113111
Malicious code in graphql-deimos-vulcan-helios npm...