Malicious code in shilang-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f87f073af266c91778b1e536c4455149017e438037b80d51e18bd93871c5fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...