Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace4fe78c64c1ed51a7b328defee8c4e6ccda84767ed61f7599ccd715445ee2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...