Malicious code in exec-ignite-hermes-process (npm)

Source: amazon-inspector 726b2645751743cf3aae79ce0cc9b10a4997d86f928762af4164921ef402202d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...