Malicious code in @ikbal_fadilah_vanexa01/vanexa-agent (npm)

Source: amazon-inspector 481daae8905848ad63e1ea0680645761de3594c5eaa017e9e6f6ea8fe6e2282e The bundled daemon in dist/bundle.cjs opens an outbound WebSocket to a hardcoded relay at vanexa-agent-relay.hanazaki542.workers.dev an author-controlled Cloudflare Workers subdomain, parses inbound JSON...