Malicious code in carina-nodejs-spectron-webdriver-regulus (npm)

Source: amazon-inspector d909a0b8a65012cbd4ed15cd892115f1d939bc275716f29f577f44d5e0d6476d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...