Malicious code in izar-sails-eslint-plugin-bootstrap (npm)

Source: amazon-inspector 5795e8e9e7b64dd726d1a7c4d0abe9e021363d84b51f5fe638d0ed59ae3c16d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...