Malicious code in etherproxy-lite (npm)

Source: amazon-inspector 5756836b470f645f316696cbaedb1aedc21cde7fc921714bfbf70f2d528ad5b4 The bundled dist/index.js reads process.env values and posts data to https://api.telegram.org via a hardcoded fetch call line 97, with additional POST/fetch primitives at lines 63, 69, and 98. The Telegram b...