Malicious code in cluster-callisto-ursa-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229943c5e9d79a2f0d941b9a02ebda9cab8fd22ad809ae3f4897beb3c6be0936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...