Malicious code in devplatform-spa-plugin-feature-toggle (npm)

Source: amazon-inspector 2d61b9d430e59b37ce3c13873e37c1dd146d468b6a06f462761e2214acd1d0fa [email protected] executes attacker-controlled code on the installer's host at module import. The package's main entry loads support.js, which builds three hardcoded origins under...