EUVD-2025-53505

Malicious code in light-coffee-lizard npm...

EUVD-2025-51930

Malicious code in sore-coffee-harrier npm...

EUVD-2025-50963

Malicious code in xerothermic-coffee-gorilla npm...

EUVD-2025-50879

Malicious code in zeroth-coffee-alligator npm...

EUVD-2025-54769

Malicious code in dry-coffee-butterfly npm...

EUVD-2025-51331

Malicious code in unknown-coffee-roundworm npm...

EUVD-2025-53648

Malicious code in jealous-coffee-trout npm...

EUVD-2025-50927

Malicious code in yelping-coffee-walrus npm...

EUVD-2025-52697

Malicious code in practical-coffee-coyote npm...

EUVD-2025-51968

Malicious code in small-coffee-hamster npm...

Malicious code in strong-coffee-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54751dab2c07637bb633b47ccc5b4b783ab0cb6a100fba3ec7417861addf4b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53268

Malicious code in middle-coffee-jay npm...

Malicious code in definite-coffee-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ffb01ba1fd92d2f099bfb1548b851710688afbef4669cf71691c438814ae78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52228

Malicious code in rough-coffee-quail npm...

Malicious code in aggressive-coffee-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6521ee3de54b7b3ceb0bb7a3a70d51cf53fea8bebd471ce44250f54d489f07b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53485

Malicious code in limited-coffee-crawdad npm...

EUVD-2025-54595

Malicious code in entitled-coffee-ox npm...

EUVD-2025-55855

Malicious code in anonymous-coffee-jaguar npm...

EUVD-2025-51160

Malicious code in vocal-coffee-toucan npm...

MAL-2025-68704 Malicious code in honest-coffee-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1406aa72874941a8a7f6fd7945f03d3bf24637361e0bdc114533806e891f48f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...