EUVD-2025-52895

Malicious code in organisational-coffee-puma npm...

EUVD-2025-55948

Malicious code in aggressive-coffee-toucan npm...

Malicious code in flying-coffee-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8203116f266de34e570edf87f871a2a61280a744da4c62f27f6d5c382dcbb935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51759

Malicious code in strong-coffee-firefly npm...

EUVD-2025-53164

Malicious code in motionless-coffee-centipede npm...

EUVD-2025-52033

Malicious code in silent-coffee-chameleon npm...

Malicious code in main-coffee-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8399e9569f57d1f6e9b8028b704c023bbfb0e549753b5c63a174fcb1b87e849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52011

Malicious code in single-coffee-leopard npm...

EUVD-2025-54899

Malicious code in different-coffee-frog npm...

EUVD-2025-55264

Malicious code in conceptual-coffee-constrictor npm...

Malicious code in objective-coffee-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723a2100c4ffee881ca605634382d1561b909db72ce4f270fbc4c1c6b98dd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54803

Malicious code in double-coffee-meerkat npm...

Malicious code in clumsy-coffee-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9df5d6d5e609419ad2130c5f0282007728a215b3ec9a541959387acf00c4004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53447

Malicious code in logical-coffee-chicken npm...

Malicious code in dry-coffee-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3da734d4809b2e88b3cf1c3b06d695f960941e7104863a29baa267d93ba2e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55340

Malicious code in combative-coffee-tiglon npm...

EUVD-2025-52980

Malicious code in objective-coffee-constrictor npm...

Malicious code in jealous-coffee-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d751f8817e741999389582fc83f6f25d53aa7511f92ba071cd3ddd9abdadc918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51604

Malicious code in tasteless-coffee-orca npm...

Malicious code in inherent-coffee-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56f526985542c41bd32e6433b7f3a3fa3496c5abb254554ab888707d85913d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...