Malicious code in nasrul-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3f4c2f173f1d7b9da9fdf9cbf6241cbc322cf1a0ba167dafb4401c3997bb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...