Malicious code in famous_firefly_0xrequest (npm)

Source: amazon-inspector ffc962832e79618c4a4a2257a1f3ec243111ead237ba57c4ed27b67192e5c60a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...