Malicious code in dbconnectify (npm)

Source: amazon-inspector e23c446b06120537793ebc07d748d8de5334ae4ec6779bda5368885c72216e81 The package exposes a method queryDBConnect that performs an HTTP GET against a URL stored as a base64-encoded constant HASHKEY decoded at runtime via atob. The decoded endpoint is...