Malicious code in alvito-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511cb62763996f20d868328b7ebc9113e13652ad0dfa6cea9852f51dc71d0635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...