Malicious code in colonial-lavender-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be406abe776b818c911262390171900eec0aabd095ad292a6c06d14b14fcb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...