Malicious code in developing_constrictor_rose-97 (npm)

Source: amazon-inspector 97baf9f8bc7dc3d11d00ef20cc558abd7c98dfce66e298e783b12141dc9082af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...