Malicious code in epimetheus-mini-css-extract-plugin-barnard-apollo (npm)

Source: amazon-inspector a1cfcb545559f2996c7f4a71f9a4e7d0a08c42e31a731215a45e3910b4edabdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...