Malicious code in centauri-element-ui-stream-sass-loader (npm)

Source: amazon-inspector d22c88d307517c0f8734fcc54d632a4d7521391e7a5a2d77fa1de6fc1f29885f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...