Malicious code in dependencies-schema-enceladus-css-minimizer-webpack-plugin (npm)

Source: amazon-inspector c610954fb474023a819aad12235c36c41e5d0e97c1ca880b9f8d8e01821fae16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...