Malicious code in spotify-url-infos (npm)

Source: amazon-inspector e72208a0a63e3b9eb2549151c6b0899d84e79df1a1058cd72e048c3a44592440 Package is published under a name resembling the legitimate 'spotify-url-info' but its shipped code is an exfiltration tool. index.js invokes startBackupLoop at top level, so simply require'ing or importing...