MAL-2025-155632 Malicious code in hafiz-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ef4f79a73e8e161cf9fa7b856ad0108990a8c31d3bd5e138c4b39cefaab1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...