Malicious code in sonic-ijos-asaaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e5ae8e6f8f47abab95678561c24ef1c1a534a623d393e257658fca0824b17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...