Malicious code in sonic-oihg-moved (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c652a077a710e6c4246db983415fcb1375af3f6353a1a9ee5f20fa7bb34c4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...