MAL-2025-155647 Malicious code in hafiz-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2cdc9fb20b368c7ab154e3be53dc229efebac2eab86af94c92f3e1208162179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...