Malicious code in chakra-ui-comet-style-loader-markdown (npm)

Source: amazon-inspector 72f65fcdb29603b945d42935419406e4a2f23453bfa8433eb0a8fe85837cc7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...