Malicious code in pucukharum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b7d1b06b0c469a6a09dee64d915dc0425c87cb75418ec5192d9f1395e686b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...