Malicious code in lala-poke5 (npm)

Source: amazon-inspector 25b5b33d1ca791ff61de91fdc6e86f06667042a247e903b4142a87c322c9af1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview lala-poke5 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...