Malicious code in constitutional_mackerel_z3n (npm)

Source: amazon-inspector e2e9766cc3e88e2f0da2ad72b5eed991566a786816a6960dea62bc00f34ff5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...