Malicious code in beaver-ui-ai-chat-layout (npm)

Source: amazon-inspector c18143c270ff7461d38c50147f24245f346aecf7cc07e4883590c9c677b13809 Package is advertised as a UI chat layout toolkit but its index.js unconditionally requires a setup.js that side-loads a 77 KB module internally labelled 'Analytics SDK'. On require, setup.js reads the...