Malicious code in continued_lemur-silentdev (npm)

Source: amazon-inspector 32c36ac2fd9ba2e0d6ac9057f6198334a07727b45c5a67785cd9a2e016c14dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...