Malicious code in sonic-jos-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd190dcab38d1a22034ad628fd2f5873360f5f7d68f8693ad9f156eb357e2cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...