Malicious code in alvira-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50ec8d85d61a1a65ef959b73aa85042eee32b6934fb45ea05ef4655918ce85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...