Malicious code in hanafi-oncom1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90124c555f65b579381213d28bb79d9191eaeea8b40ae2f87861c085a18dd42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...