Malicious code in messi-aa-fuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ec4397e62fe75f61f8c27c64a0ad451b93b8b525ee23e19a000755b7eb55fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...