Malicious code in messi-ata-fuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d7e07a3af643c24c2f5988b5f6d99ac442459ecf6f4911ee4eb2db7f6a5fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...