Malicious code in new_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1007b7476b1af11feb7b80f1e666f95e705aa292ff8b1fba06435f31da8f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...