Malicious code in hafiz-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3a6f61e0e88cf5414d4ee7c24671ed05f4f23025d32e1df09db75e3b7a77a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...