Malicious code in kepler (npm)

Source: amazon-inspector 672a1c042704318fe56d5da08c0f1d20b404274bd6ad339efc2f1c581d869d77 [email protected] declares its only runtime dependency, flag-serial-object-syntax, as an HTTP URL to a third-party host https://artifacts.yosiroute.com/npm/flag-serial-object-syntax rather than a version resolv...