Malicious code in @trackunit/iris-app-sdk-vite (npm)

Source: amazon-inspector 22e0a86ea25c65d4c79c952852d254c96966dbc20a2c1017ea29cde939c35b5c This version of @trackunit/iris-app-sdk-vite declares cross-keychain: ^1.1.0 in its package.json dependencies. cross-keychain is a package associated with the Shai-Hulud npm worm campaign, whose install-time...