Malicious code in icha-48 (npm)

Source: amazon-inspector 4d2a8fb38af5898ed4d194f72a8e4dcdc18a741b967e500859e7636116878e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview icha-48 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...