Malicious code in chai-as-indexed (npm)

Source: amazon-inspector 424ebdaa04d4f7e8ce306f536421ac65d79467e73b05877caac6b72071bdaef9 The package's main entry index.js loads./lib/initializeCaller, which on require POSTs the full process.env of the installer's Node process to a base64-concealed endpoint at...