EUVD-2025-50980

Malicious code in xenial-coffee-ptarmigan npm...

EUVD-2025-51818

Malicious code in statutory-coffee-snail npm...

Malicious code in drab-coffee-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c674f44a135155431ffd530897dde2c6893f3c4ecd3990bfa291a52dff557e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle-coffee-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4662108a78b9f5f79dd22075635cd5e5a267bb14b1526ac5cd8b633c60b6e348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52494

Malicious code in racial-coffee-squirrel npm...

EUVD-2025-55401

Malicious code in clumsy-coffee-alpaca npm...

EUVD-2025-54803

Malicious code in double-coffee-meerkat npm...

EUVD-2025-53957

Malicious code in homely-coffee-marmoset npm...

EUVD-2025-53848

Malicious code in implicit-coffee-quelea npm...

EUVD-2025-55530

Malicious code in casual-coffee-nightingale npm...

EUVD-2025-51331

Malicious code in unknown-coffee-roundworm npm...

EUVD-2025-53648

Malicious code in jealous-coffee-trout npm...

EUVD-2025-55948

Malicious code in aggressive-coffee-toucan npm...

EUVD-2025-52895

Malicious code in organisational-coffee-puma npm...

Malicious code in inherent-coffee-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56f526985542c41bd32e6433b7f3a3fa3496c5abb254554ab888707d85913d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rough-coffee-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb4c2585395e9e780966768f8101ebd3bf6fc829153f9d57557931739a49507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-coffee-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1406aa72874941a8a7f6fd7945f03d3bf24637361e0bdc114533806e891f48f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous-coffee-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecef60967f4d7a48ff1eaf48ae4b9155c8c2354dc7a3505ad9790a4fa7a508d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide-coffee-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e905ebd3d64dbdcae5b83493cff05adf712d0ec29cc9480173eb70ab2432f9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...