Malicious code in alvino-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b123549e7c9f18aae9a57d82d67d441d1ff92bd234e81d993231542b7f8b045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...