Malicious code in alvino-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b29c2b21e0209d1938c0cebfb456eaaaa2da499e7935cc0db32d52d8751e0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...