Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables (npm)

Source: amazon-inspector f176b1790aec9d8805bb91b9c95dddc4b3b22eb0bf02b4c2a40f011b21bb8146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...