Malicious code in nasrul-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def6ba4744527f5d8b6eca7f9fd36e50882078d2bd1390d58cf8e17ed9bc9454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...