Malicious code in halley-enceladus-install-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1252fa09c8e3f5e289551c8ef29c7568a2f3a15d611100b3bc20fc8b90dae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...