Malicious code in @wizloft/harness-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b0fc0f25eb3d7852b52d7e7db50071ac08ddfb1965df306bbf87ebf295cbe1 dist/index.js appends a heavily obfuscated obfuscator.io-style payload string array 0x240a of length 303, decoder 0x4963, string-array rotation after...

Malicious code in @library-dev-team/data-sanitizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec70432fa5463156a41cb4031ccdd89aa76b724eaac0c6e8e61949cb18403d02 The package's main entrypoint runs an unconditional IIFE at require time that reads .env from the current working directory and extracts values label...