Malicious code in eka-kembang4-riris (npm)

Source: amazon-inspector bded34aa5f007edcaaa6b4b4234d59b166fd5e767e084ba6cbaf2309efe3205f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...