Malicious code in @flexmr/utils (npm)

Source: ossf-package-analysis fc751fb286e3a288e498adfc3b9b936c1ff40270a1c342047a7d778ce24936f4 The OpenSSF Package Analysis project identified '@flexmr/utils' @ 3.0.12 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious...

Malicious code in @flexmr/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7039d72eee8d5f1abdc19889f0712d38273fd988a32aee832fc651712e386c52 @flexmr/[email protected] ships a one-line re-export stub whose package.json declares its sole dependency daemon-thread-lookup-buffer via a direct HTTPS U...