Malicious code in @finaxis/common-js (npm)

Source: amazon-inspector f708a31239d3dc7490906a4a41f5ccb3cb76c99f89bc87b5ad5884939bb2d308 Package is published with a README copied from lodash v4.18.1 and keywords 'lodash','lodash-js', but the sole shipped module dist/common-js.js is a heavily obfuscated bundle javascript-obfuscator with...