Malicious code in @mipta1/yaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53c7109b05bb9d42077fae18ca8f2c9d28d332f8c0ef41573963666de3dc4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...