Malicious code in educational_felidae_z3n (npm)

Source: amazon-inspector 90f896520981f9bfc7154d597ae6261cc4508b47a532deec6735ebe503850b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...