Malicious code in json-blaze-venus-antd (npm)

Source: amazon-inspector d51c1c6ec63a3d99da75baa6514564df1e94d76b8d4233dc509033894f4ee415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...