Malicious code in @nzeros/codebreak (npm)

Source: amazon-inspector cf2d80dd4a014bd04f0f01ef666cc4a6a09bb010a37e572a0eb9a3e0298ed5fe The package declares native/solver.c as the source of a small C minimax solver and advertises vendor/solver-- as its compiled output. The darwin-arm64 slot contains a 34KB Mach-O consistent with that C sourc...