Malicious code in manda-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209af701a75cabf5fa6c1f6461c9fba7e41d232b074ca5c6d8d2f5c051d3cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...