Malicious code in @itsreduxtm/unpkg-xss-test (npm)

Source: amazon-inspector 39614132e3675ec887b41aa6834ac54cce90e248d43f008345444b86e1870d82 payload.js is declared as the package main and runs an IIFE immediately on require/import. It fetches a wordlist of Linux binary names from https://unpkg.com/@itsreduxtm/[email protected]/binlist.txt and...