Malicious code in ronaldowati-cir5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfbd3047d3d91f5e0dc45e737a754786d5f9ae4c720f0bdc17a22b71c13d6031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...