Malicious code in @jm-telefonica/multibrand-components (npm)

Source: amazon-inspector 7ef565c5fd4b4baa7e0bff888cf34107fa8a9385932195fa4fd90ad39f250927 package.json at line 9 declares the sole dependency ltidisafe as a direct HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.4.tgz rather than a registry version range. On npm...