Malicious code in boxy-search-workspace-substrings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e86dee583e9f4fb1f10351062e6b4a9ddb6b4eae29b59677c1e8f4bf04711b6 On require of the package, index.js silently loads loader.js wrapped in an error-swallowing try/catch. loader.js reconstructs a set of destination...