Malicious code in sumpel-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9548fc7688d7dc70a41edf016f9de6ff56e8fe58c8438d3fe3fdf220d145d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...