Malicious code in hydration-ui-pkg (npm)

Source: amazon-inspector d848dd11c0e0692f1f47c8fcb3cb0506316e96ab32f8b63a8913ad67e9570318 Package main dist/index.mjs locates dist/internal/mathcalc.mjs — a raw x8664 ELF binary shipped under an.mjs extension and described in the README as a 'native math accelerator' — chmods it to 0755, verifies...