Malicious code in alvito-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19872324b1a1dd5ee467802243b9718940356221e64db1b26353e84b4d6abd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...