Malicious code in icha-60 (npm)

Source: amazon-inspector 0334bf2f0c92fdde4010dc2de07b41fc187edfcfa2454262ecddbcd4dd8baaa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview icha-60 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...