Malicious code in less-loader-jekyll-deneb-luna (npm)

Source: amazon-inspector ed157d56fb67e98deba99a6d5281c9515fa8d59b328ad7646dd64e7fffe9aeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...