Malicious code in icha-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e04ef4aed788f6f2df40e883f890c1ea6cd87dd36b44cc1de2df9c287d033f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...