Malicious code in google-hermes-telesto-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583eed0b0920ff215525064915600ba5db9ac1537af94ba4462d0043514e7c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...