Malicious code in xa424234657567 (npm)

Source: amazon-inspector 0174148efc99cd1130b3b9f2c57599aac0f80ead454fd7dc0f397386db891b0c The package ships console.js, which when loaded in a browser on any host matching duel.com fetches https://unpkg.com/[email protected]/1.js and https://unpkg.com/[email protected]/ui.js and executes both via...