EUVD-2025-55531

Malicious code in casual-coffee-cephalopod npm...

Malicious code in flying-coffee-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8203116f266de34e570edf87f871a2a61280a744da4c62f27f6d5c382dcbb935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-coffee-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474096b32aa3c1aedeea59447b0e1b3919008eef97e74dfd4815e30e5e594f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52228

Malicious code in rough-coffee-quail npm...

Malicious code in zealous-coffee-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecef60967f4d7a48ff1eaf48ae4b9155c8c2354dc7a3505ad9790a4fa7a508d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54816

Malicious code in domestic-coffee-gazelle npm...

EUVD-2025-55766

Malicious code in autonomous-coffee-termite npm...

Malicious code in worldwide-coffee-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e905ebd3d64dbdcae5b83493cff05adf712d0ec29cc9480173eb70ab2432f9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in square-coffee-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810c6489fd1b4ec065f2c745dc8d310702c9ffa3dd4788b5f19c257124354890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55868

Malicious code in angry-coffee-ox npm...

EUVD-2025-55819

Malicious code in architectural-coffee-goldfish npm...

MAL-2025-69258 Malicious code in main-coffee-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8399e9569f57d1f6e9b8028b704c023bbfb0e549753b5c63a174fcb1b87e849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective-coffee-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723a2100c4ffee881ca605634382d1561b909db72ce4f270fbc4c1c6b98dd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53109

Malicious code in national-coffee-bovid npm...

Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51488

Malicious code in total-coffee-pheasant npm...

EUVD-2025-51452

Malicious code in troubled-coffee-tiger npm...

EUVD-2025-51160

Malicious code in vocal-coffee-toucan npm...

Malicious code in combative-coffee-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44ffdb66152a4debc959d1c6e865f6fdb6f40c14b8194cf9ecd8dbb5c8f4d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52457

Malicious code in raspy-coffee-bonobo npm...