Malicious code in inal-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02eec798a2f848a2412691dea05a0fc9ce7d40d2ab339af62a1c2e9226878652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...