Malicious code in halley-eslint-plugin-google-phoenix (npm)

Source: amazon-inspector 4c1a1bbe19c10c90b8a467eb1130aba1a148edc3bb3b8ea42919a5377f413741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...