Malicious code in lisa-jamblang15-sukiwir (npm)

Source: amazon-inspector def2c3157af4b848bc9bd17cc9accc2fe70f3793169f7e41e45b3b7d3050cbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...