Malicious code in centaurus-update-xanadu-less (npm)

Source: amazon-inspector e3c033a41027d427a96352e53d7de60a8b3dc1841af564c6b29083ee2632cf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...