Malicious code in siren-lament (npm)

Source: amazon-inspector 66198e889b19f908f338ab5cad00c57bc95194bff8938dcf26c4a853c0b260d8 The package contains two files and declares no lifecycle scripts, remote fetches, credential reads, or network exfiltration paths. Version coordinate 0.0.0-stage and minimal file count are consistent with a...