EUVD-2025-54967

Malicious code in definite-coffee-perch npm...

Malicious code in rough-coffee-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb4c2585395e9e780966768f8101ebd3bf6fc829153f9d57557931739a49507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53945

Malicious code in honest-coffee-minnow npm...

Malicious code in zealous-coffee-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecef60967f4d7a48ff1eaf48ae4b9155c8c2354dc7a3505ad9790a4fa7a508d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verbal-coffee-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3248299f353b359f54950b7f642e3430c8abb8e87d4f0c5b261a0e6f5dda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54143

Malicious code in genetic-coffee-sparrow npm...

Malicious code in angry-coffee-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f46f54cf29bef66e4c892999577a450e75fd68c79129b01bf84b5ea4e72a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53391

Malicious code in main-coffee-smelt npm...

Malicious code in drab-coffee-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c674f44a135155431ffd530897dde2c6893f3c4ecd3990bfa291a52dff557e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51809

Malicious code in steep-coffee-galliform npm...

EUVD-2025-56041

Malicious code in accepted-coffee-grouse npm...

EUVD-2025-52457

Malicious code in raspy-coffee-bonobo npm...

EUVD-2025-53957

Malicious code in homely-coffee-marmoset npm...

EUVD-2025-51221

Malicious code in verbal-coffee-swan npm...

MAL-2025-71763 Malicious code in zealous-coffee-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecef60967f4d7a48ff1eaf48ae4b9155c8c2354dc7a3505ad9790a4fa7a508d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70699 Malicious code in smooth-coffee-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97818a6ce079959b9e5dd4b5f4236441c26c671bb5ec0ec26d8f541e2e8e83f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67309 Malicious code in combative-coffee-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44ffdb66152a4debc959d1c6e865f6fdb6f40c14b8194cf9ecd8dbb5c8f4d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67248 Malicious code in clumsy-coffee-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9df5d6d5e609419ad2130c5f0282007728a215b3ec9a541959387acf00c4004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52228

Malicious code in rough-coffee-quail npm...

Malicious code in silent-coffee-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25ff3223a62a54a89e678df6f46dd92fccd39ae7d1d69ff9ee5a79efccccd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...