Malicious code in rival-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d50c18a29130728b06e4b2c64291cbda6e83d6708b8dafddd2754f6615f6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...