Malicious code in csrf-init-apollo-hyperion (npm)

Source: amazon-inspector 3e2421d0af6b38ba2ed5dbe7b3622fe8083344c0337a52128c9a27540b87483f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...