Malicious code in ilal-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3879a7ae0c9bb9c958338d0d8f036510b47e73f43cb96c6bc4f3c0b950ef1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...