Malicious code in eka-lumpur7-breki (npm)

Source: amazon-inspector 381fe7f1d3b9c8093105714f8c9c1e9e02a8435d5a71e81f9a05510a658b0320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...