Malicious code in alvira-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2464fa588ef949c2ff3d357dbd0ad1be424c9d02be113e148f0bc1cabe5e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...