Malicious code in claims-is-mobile-layout (npm)

Source: amazon-inspector b964f402f05efc7be7776cd7f2255b889404ca7c83fb10a8efbb6b85d53f955b On require of the package, index.js unconditionally loads./vendor.js, which selects a platform-specific endpoint, downloads a native binary over HTTPS, writes it to /tmp/.cache on Linux/macOS or...