Malicious code in kapai-afaaa-agda (npm)

Source: amazon-inspector cc74cb05b3a17d18bc4a5ac41c2bfd2eaa865b7b7a230f9966a36763fe05d585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...