Malicious code in kapvino-sofaggdi-ugha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58cecc3e9fcaa90a05d53987203d823501e3229a2e7de38b460a01cd561f8040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...