Malicious code in air-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f70e248c17c599fb14fe73c642cd1b6d3164f8e02f6695fe76779fb92d0fead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...