Malicious code in keyla-poke34 (npm)

Source: amazon-inspector f4840e37b4c52a5531890eeab3169b17cdc55b8a9951f4c7c8ece98a94abdb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...