Malicious code in @addai/node (npm)

Source: amazon-inspector 6ca685518d56ea513609a2dfcd845bb14d94c3faaf58645553c688ca59817921 The package installs a background daemon dist/session-runner.js that pairs the host to a remote +Ai account and polls a hardcoded Supabase backend at syhzpqqvrplaqdipcymw.supabase.co for request rows. Fields...