Malicious code in devplatform-eslint-plugin-nx (npm)

Source: amazon-inspector 35adb61664d8a7067c4ace2c143ed75e5e316dcd5365201ac8614ef9ff07e668 [email protected] is a typosquat lure targeting @nx/eslint-plugin. On require of the package, index.js loads runtime.js which asynchronously downloads a per-platform binary from one of thre...