Malicious code in riyanto-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3a8c488566dea543440f631f560d6f0a47563b00e90cf9d2a458c350beb09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...