Malicious code in cloudflare_module (npm)

Source: amazon-inspector 14316e66f8d8eeb53b5fd4850537ac5398947feaf88f3837e39bfa587f60a0fb [email protected] is a typosquat of Cloudflare branding whose only functional code is an install- and import-time beacon. beacon.cjs defines BEACON = "http://185.158.107.175:8787/ah/dc" and a fire...

Malicious code in cloudflare_module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a545e1e930894c3320e68c2aee17dd2cec7f20ed03b2e882905056d0eee242 Package [email protected] is a dependency-confusion lure targeting the cloudflare namespace. package.json declares scripts.postinstall: "node...