EUVD-2025-53760

Malicious code in inherent-coffee-gamefowl npm...

EUVD-2025-54337

Malicious code in few-coffee-earwig npm...

EUVD-2025-56041

Malicious code in accepted-coffee-grouse npm...

EUVD-2025-54588

Malicious code in environmental-coffee-mite npm...

Malicious code in verbal-coffee-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3248299f353b359f54950b7f642e3430c8abb8e87d4f0c5b261a0e6f5dda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54277

Malicious code in flying-coffee-buzzard npm...

EUVD-2025-52033

Malicious code in silent-coffee-chameleon npm...

EUVD-2025-55198

Malicious code in continuing-coffee-tiger npm...

EUVD-2025-53109

Malicious code in national-coffee-bovid npm...

EUVD-2025-52980

Malicious code in objective-coffee-constrictor npm...

EUVD-2025-54899

Malicious code in different-coffee-frog npm...

EUVD-2025-50980

Malicious code in xenial-coffee-ptarmigan npm...

MAL-2025-67880 Malicious code in dry-coffee-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3da734d4809b2e88b3cf1c3b06d695f960941e7104863a29baa267d93ba2e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71113 Malicious code in thirsty-coffee-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a96d740a80e4ce8e80b4b77bddf107176b3de94ddec2c14ba359559605fcbfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50963

Malicious code in xerothermic-coffee-gorilla npm...

EUVD-2025-55855

Malicious code in anonymous-coffee-jaguar npm...

EUVD-2025-51930

Malicious code in sore-coffee-harrier npm...

MAL-2025-68521 Malicious code in gigantic-coffee-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019c11bef911bfbcb2ba9c4528051821341a05afed569cb701fc779077b54240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71669 Malicious code in xenial-coffee-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68714133de186267cbe6e739ebc33d2179ec6f1cd9b9a3b2d6f21f4ba93cdc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71489 Malicious code in vocal-coffee-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3b53100e68addd2ad29b62ffc17e9659e8be96020478252a6d2a50e929af94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...