Malicious code in rival-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ddb291fc2631dffeecab29b537064193ecc6611469049d26ed5548cf700fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...