Malicious code in amazon-vendor-analytics-mcp-server (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...