Malicious code in messi-afta-fufff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2264da964122e8ad4428e2df60c53ded0383eb4afcb4b0f46f60047934861a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...