Malicious code in rival-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5af8bdf1f6d9383aab9504a1c9ea5186d41166e2246208590e1681b270ee53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...