Malicious code in ilang-30 (npm)

Source: amazon-inspector 4eb47064530c55628122c251c58694de35c35e5de7e7d0fbc3b4c61600b5d377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...