Malicious code in rival-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d54bd140a401daafd58f237f7732674f38fef52f8cc43b7f2f54f850ff7522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...