MAL-2025-70973 Malicious code in supposed-scarlet-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e32572fd9ae5d70a5c1c803eb1bebe0ee660e2e816b7dbcdb908adbfc66a27a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51676

Malicious code in supposed-scarlet-cricket npm...