Malicious code in @whalent/agent (npm)

Source: amazon-inspector 0d9a3395e3bbc1bae774ea99bb4100a3db071a6b4527eaba0ae9089eb51bf268 The package ships as an agent daemon whose bundled entry dist/index.cjs, dist/core.cjs connects to a hardcoded WebSocket gateway at wss://memory.whalent.com/gw/sdk/ws and executes commands received from the...