Malicious code in nizzybase32 (npm)

Source: amazon-inspector cd8ad52e73a1c796a1dbe22501f4ef2d42f3ceea98cc259e1ceefb1a214cfa56 The CLI in bin/hibase32.js computes SHA256 of user input and, on one hardcoded magic digest 'bb9d5bbbd62fc66b63c0866b12656fd9038441acb4f90c136c5a3601e7909a23', dynamically requires the 'portloop' module and...