Malicious code in eka-lapis96-riris (npm)

Source: amazon-inspector f6011387c977a742bad4e7b7e25cf8f5de31b5f6fe4bca711f1931a3a6f9e9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...