Malicious code in cometcommander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b478ea5c61418b14481346afd2ab177a40ad1b17ffbfc2ce2a754e7f5d9ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...