Malicious code in json-figures-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f0f17392b56d80f72cd5d178af7fead25d375c34ebf71364de580a8bc05822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...