Malicious code in alvira-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca25fd7d20d7b0ed64cb7e95edcd59f6130efb9ee0fb5c0b5b290f7c8b39523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...