Malicious code in trevora-cir76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d29d86f08b7254f70773cad2e9d8bbe69e939f59c9da85758acb61ee264e5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...