Malicious code in localization-fixer (npm)

Source: amazon-inspector 72446c1307e81047c64d819d3485fa77062061c8c9d4d0b38b42e311137c8701 On require of the package's main entry, a top-level if isServer syncLanguageSystem fetches a JSON payload from https://api.jsonbin.io/v3/b/6a764665da38895dfec7cd5d and executes the returned record.value fiel...