EUVD-2025-123274

Malicious code in promise-rimraf-supervisor-graphql npm...

EUVD-2025-112969

Malicious code in halley-graphql-miranda-changelog npm...

Malicious code in websockets-graphql-regulus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbbda8427ea6dbb869b1b65944d6ea5190110070e68da12643f4631637ca0a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-graphql-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6523adc4e404cbe331811a878d4d2667af07aae668bf286e33c5611ffd5bef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113111

Malicious code in graphql-deimos-vulcan-helios npm...

EUVD-2025-116105

Malicious code in betelgeuse-optimize-css-assets-webpack-plugin-graphql-neptune npm...

EUVD-2025-115359

Malicious code in child-process-graphql-unuk-bootstrap npm...

EUVD-2025-111477

Malicious code in magellan-graphql-levels-inquirer npm...

EUVD-2025-122079

Malicious code in semantic-ui-dione-graphql-kinetic npm...

EUVD-2025-112316

Malicious code in janus-apex-writable-graphql npm...

EUVD-2025-122575

Malicious code in rest-exec-graphql-algol npm...

EUVD-2025-120694

Malicious code in vulcan-graphql-sadr-leda npm...

Malicious code in thuban-oauth-graphql-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bea268dfde784764d8a6760df49b436ccfb4a3c6881153cfd443747248420d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113116

Malicious code in graphql-cache-dactyl-meteor npm...

Malicious code in bulma-webdriver-mocha-chariklo-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f76f4befed367725c54fd0a28c5edda5b5d5e711a7c93746a910206e99aaaea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113106

Malicious code in graphql-orbit-csrf-yaml npm...

MAL-2025-145012 Malicious code in mira-oauth-graphql-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd666d7a3a56d61d6f5aaaadba57754e6def4f1ffc6d210c12b9da72eccc0b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148658 Malicious code in thuban-oauth-graphql-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bea268dfde784764d8a6760df49b436ccfb4a3c6881153cfd443747248420d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143797 Malicious code in janus-apex-writable-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfdc92c35108b7bac99e9f035fd519cc20125241b0a253c8541000e44936d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139345 Malicious code in altair-airbnb-graphql-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c76d50832dc7ab98677387bda1e24e8e43a74397e6dc03c9b59ea52ff4393cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...