Malicious code in dolyame-ui-skeleton (npm)

Source: amazon-inspector 340d04c991fde57848574728e622b6f4c3b1d2e7dcd061e590c4da91bbc6f12d Package advertises itself as a visual/UI components library but ships a load-time binary dropper. index.js unconditionally requires./vendor.js, which on require downloads a platform-specific binary from...