Malicious code in air-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e9bb544e7695b5b9ad3cf8e3f8799f82fb4e3800aafb284eb64cd6c30a4daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...