Malicious code in extreme_thrush_z3n (npm)

Source: amazon-inspector db51a6e57e03c92027948d82e3566b42aa481c1ef6f9a372928bd72f0a1a3e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...