Malicious code in @shadowmd/libsignal-node (npm)

Source: amazon-inspector 51bcabb5263ecf1f1259bd5969a921866dbb808da4fda7b9d7708baeb60c21e6 Package name and description impersonate the Open Whisper Systems libsignal-node library. On require, index.js schedules install.js, which locates an installed @whiskeysockets/baileys package in nodemodules...