Malicious code in shilang-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7671a6e8828558b0e06970e3616ff749aed945b60bf765be4edd60533f8f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...