Malicious code in bigops-storio-ngrx-component-store (npm)

Source: amazon-inspector f8f5027d945d8a05fe554b838ba2036e29a99c4296ad532b8d47a1bbaa22650e The package name resembles @ngrx/component-store. The main entry index.js requires./helpers, which on module load assembles attacker-controlled hostnames via array-join concatenation e.g...