Malicious code in hafiz-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3027de3dce0147bac79cc7e4ca1318e9413ce52a5d28be675de8acca1ae7e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...