473 matches found
EUVD-2025-53848
Malicious code in implicit-coffee-quelea npm...
Malicious code in total-coffee-pheasant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bd1c1d6e2fca9efb9b05550bd0f88fbb619cca53db38211f406a3308b24a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53748
Malicious code in inner-coffee-cougar npm...
EUVD-2025-55766
Malicious code in autonomous-coffee-termite npm...
Malicious code in inner-coffee-cougar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb43827b00821192d87d2a4d4845c49c20d444a2340c9207a68c747d14b9e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54112
Malicious code in gleaming-coffee-tortoise npm...
Malicious code in square-coffee-grouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810c6489fd1b4ec065f2c745dc8d310702c9ffa3dd4788b5f19c257124354890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51452
Malicious code in troubled-coffee-tiger npm...
EUVD-2025-51950
Malicious code in smooth-coffee-wallaby npm...
EUVD-2025-50886
Malicious code in zealous-coffee-pike npm...
Malicious code in silent-coffee-chameleon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25ff3223a62a54a89e678df6f46dd92fccd39ae7d1d69ff9ee5a79efccccd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in weak-coffee-warbler (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55746
Malicious code in aware-coffee-sparrow npm...
EUVD-2025-54588
Malicious code in environmental-coffee-mite npm...
EUVD-2025-53906
Malicious code in hushed-coffee-bobolink npm...
EUVD-2025-53666
Malicious code in irrelevant-coffee-earthworm npm...
EUVD-2025-50950
Malicious code in yappy-coffee-canidae npm...
EUVD-2025-54338
Malicious code in few-coffee-asp npm...