Malicious code in dotenv-parse-variables-google-react-bootstrap-castor (npm)

Source: amazon-inspector 01acb5cbcbe72e609c306db5528e68a96620e9d9b9c8ab33073d70c418e3a8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...