Malicious code in command-parcel-stop-less-loader (npm)

Source: amazon-inspector 252c38b91e5f81c51886894097ce6541eb32f93c1828c1c30877c7209a8a83b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...