Malicious code in keyla-poke82 (npm)

Source: amazon-inspector c98dbe470fd2b87944dc04794f2afafd1f85ff0244dbe2ec0572d49b92a0affc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...