Malicious code in rival-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c863d8caacb8bff573f4727d4fecfc0b4140b8d4e6a33da7ef005e9adcb3ce48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...