Malicious code in @bcrumbs.net/bc-chat (npm)

Source: amazon-inspector d4bd9ccff2d027c9982ab41ff4b4417e62475e70aba04212794f267030f63ab0 The exported BCChat React component embeds a hardcoded Azure Blob SAS URL https://bcuserres.blob.core.windows.net/anonymous with a long-lived SAS token valid through 2027-12-31 and uses it to upload every fi...