Malicious code in physical_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab8acf523ac63db93d81cd74f3268e46cb54b71e4e359c711deb1c6e929cc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...