Malicious code in alvito-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a7fb436cb76b3a082c80aa8ba9463f93d96e491903fe62e5d5e5a73dfaa6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...