Malicious code in json-development-publish-terser-webpack-plugin (npm)

Source: amazon-inspector 7a13ea91c3e39772484aa02c1e2b6604be57894e72701604e225fe0423043eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...