Malicious code in sonic-oihg-movedaxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970fdaafc20d88b95118c24a7c01f8612577d6d6bc371a7e4005ba35b1609abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...