EUVD-2025-53666

Malicious code in irrelevant-coffee-earthworm npm...

Malicious code in aggressive-coffee-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6521ee3de54b7b3ceb0bb7a3a70d51cf53fea8bebd471ce44250f54d489f07b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50879

Malicious code in zeroth-coffee-alligator npm...

Malicious code in strong-coffee-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54751dab2c07637bb633b47ccc5b4b783ab0cb6a100fba3ec7417861addf4b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54595

Malicious code in entitled-coffee-ox npm...

Malicious code in middle-coffee-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4662108a78b9f5f79dd22075635cd5e5a267bb14b1526ac5cd8b633c60b6e348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51160

Malicious code in vocal-coffee-toucan npm...

EUVD-2025-50963

Malicious code in xerothermic-coffee-gorilla npm...

EUVD-2025-50927

Malicious code in yelping-coffee-walrus npm...

EUVD-2025-55819

Malicious code in architectural-coffee-goldfish npm...

EUVD-2025-51950

Malicious code in smooth-coffee-wallaby npm...

EUVD-2025-55766

Malicious code in autonomous-coffee-termite npm...

EUVD-2025-51930

Malicious code in sore-coffee-harrier npm...

EUVD-2025-52697

Malicious code in practical-coffee-coyote npm...

EUVD-2025-52494

Malicious code in racial-coffee-squirrel npm...

Malicious code in definite-coffee-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ffb01ba1fd92d2f099bfb1548b851710688afbef4669cf71691c438814ae78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53268

Malicious code in middle-coffee-jay npm...

EUVD-2025-53648

Malicious code in jealous-coffee-trout npm...

EUVD-2025-53906

Malicious code in hushed-coffee-bobolink npm...

Malicious code in total-coffee-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bd1c1d6e2fca9efb9b05550bd0f88fbb619cca53db38211f406a3308b24a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...