Malicious code in baso98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03482c981ab225dbbcbe2ea498e5cb2610599ad6c07726b0a8b20aed1692960b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...