Malicious code in lexical_prawn_emerald-96 (npm)

Source: amazon-inspector dba5af5e1b3de7017320ecbfc9aad4be0313c156cd3a294c121cfc71aed2d488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...