Malicious code in dian-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3f7d5fc8b82ac07a1c56c2df64bf822b4fb86a49c147ed3675b2e9df2fe8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...