Malicious code in nasrul-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddfe8e2b0f869485de4fa820e6e7606d5b237c7d06caec698c2e430d30e82181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...