Malicious code in disabled_dormouse_dumbs (npm)

Source: amazon-inspector 3d6031e943785f18cbf9ba1d0a51b450d1c4dea9697b77eef355a2981b8cf3c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...