MAL-2025-95068 Malicious code in intelligent_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812338df2d91805542df3781e05d80c88ec364a3efe501d07a7c29569cad4933 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8320738baead6af2bf10b6bfd6c36b7532e84f595b033ea209136bcdae8b1d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54788

Malicious code in dramatic-olive-cricket npm...

EUVD-2025-51802

Malicious code in stiff-brown-cricket npm...

EUVD-2025-53147

Malicious code in multiple-pink-cricket npm...

MAL-2025-70973 Malicious code in supposed-scarlet-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e32572fd9ae5d70a5c1c803eb1bebe0ee660e2e816b7dbcdb908adbfc66a27a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in greasy-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd80e6332335c5ddab3126b7717e33fbe15561a56d546632acfb557c229eafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53559

Malicious code in left-teal-cricket npm...

EUVD-2025-55684

Malicious code in binding-green-cricket npm...

EUVD-2025-54067

Malicious code in greasy-green-cricket npm...

EUVD-2025-53405

Malicious code in mad-amber-cricket npm...

MAL-2025-69090 Malicious code in left-teal-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703508c9f619bee348c268436cc7a6782d6e1fd82a3e3cabdc7f45049bc7130f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing-pink-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da8d7f82c0b22be34134d5187d346b95757f756bdf2d61d19f860d108ec2610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left-teal-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703508c9f619bee348c268436cc7a6782d6e1fd82a3e3cabdc7f45049bc7130f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55841

Malicious code in apparent-lime-cricket npm...

Malicious code in mad-amber-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1a614a08ac000d402e2f001a2a46cc555d27c4868da1503c743e1f0527769a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55216

Malicious code in consistent-magenta-cricket npm...

EUVD-2025-55165

Malicious code in cooing-pink-cricket npm...

EUVD-2025-51676

Malicious code in supposed-scarlet-cricket npm...

MAL-2025-67484 Malicious code in cooing-pink-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da8d7f82c0b22be34134d5187d346b95757f756bdf2d61d19f860d108ec2610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...