Malicious code in layla-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe737f785adf5f149965e8dcb042d524d4391117ae6c32f273ae13cb074a0d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...