Malicious code in ican-poke91 (npm)

Source: amazon-inspector ddf0efc59d9f9f26ae930978e5140b51f452e1935de4e0e5738393eaf916a5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview ican-poke91 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

MAL-2025-155975 Malicious code in ican-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf0efc59d9f9f26ae930978e5140b51f452e1935de4e0e5738393eaf916a5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...