Malicious code in jsonp-semantic-ui-indus-prettier (npm)

Source: amazon-inspector 7a62c4202aa5d3e648e089cc503ce1079d1905c826f1b74e3530769393b47b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...