EUVD-2025-51604

Malicious code in tasteless-coffee-orca npm...

EUVD-2025-55340

Malicious code in combative-coffee-tiglon npm...

EUVD-2025-54899

Malicious code in different-coffee-frog npm...

EUVD-2025-52895

Malicious code in organisational-coffee-puma npm...

EUVD-2025-52011

Malicious code in single-coffee-leopard npm...

Malicious code in inherent-coffee-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56f526985542c41bd32e6433b7f3a3fa3496c5abb254554ab888707d85913d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53447

Malicious code in logical-coffee-chicken npm...

EUVD-2025-51468

Malicious code in tremendous-coffee-mollusk npm...

EUVD-2025-51818

Malicious code in statutory-coffee-snail npm...

EUVD-2025-52858

Malicious code in overall-coffee-cougar npm...

EUVD-2025-54816

Malicious code in domestic-coffee-gazelle npm...

EUVD-2025-55261

Malicious code in concerned-coffee-parakeet npm...

Malicious code in main-coffee-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8399e9569f57d1f6e9b8028b704c023bbfb0e549753b5c63a174fcb1b87e849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53164

Malicious code in motionless-coffee-centipede npm...

EUVD-2025-55734

Malicious code in back-coffee-reptile npm...

EUVD-2025-51759

Malicious code in strong-coffee-firefly npm...

EUVD-2025-55948

Malicious code in aggressive-coffee-toucan npm...

EUVD-2025-55531

Malicious code in casual-coffee-cephalopod npm...

Malicious code in objective-coffee-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723a2100c4ffee881ca605634382d1561b909db72ce4f270fbc4c1c6b98dd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flying-coffee-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8203116f266de34e570edf87f871a2a61280a744da4c62f27f6d5c382dcbb935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...