Malicious code in devplatform-zod-wip-api (npm)

Source: amazon-inspector 2629721fa3107222cef1f1669d474e7b3b45346ed87a455a168c1d199d9c6492 [email protected] is a typosquat/lookalike of the zod ecosystem that acts as an import-time dropper. index.js unconditionally requires./vendor on load; vendor.js runs at module load, reassembles...