Malicious code in ewa-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838ba09f0602d894251f18f35b2cdcb33aa5ae41869582210c5af23db848d88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...