Malicious code in finish-5-mewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d005f0eb4fc0470848da9fb4cea7cd7a75ff88c9842a5f005967394c2c035f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...