Malicious code in shilang-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeb7e43408e1f666221f63f5af177954141160c2ec46477de169e7ed92b8e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...