Malicious code in ita-27 (npm)

Source: amazon-inspector ceed00085c980ba8e71a7bb914ee847987d43e20d95bbc76eb0c7feaa4a7f823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...