Malicious code in @holocronlab/botruntime-runtime (npm)

Source: amazon-inspector ad15bd6ba410e0c0ca88ac22f1632a4b6707c4c66396c49c0ba90f906b19ae33 The package is published as a runtime for 'brt-built botruntime agents' and its client.d.ts describes the exported client as 'the authenticated Botpress client'. Bundled entrypoints dist/library.js,...