Malicious code in @avi892nash/aegis-grid-runner (npm)

Source: amazon-inspector d81514bec2b648731e0db3b59e1adbd308a5b099f80af8be6caac5db71103a00 The package's default bin action starts an HTTP server grid.mjs that listens on GRIDRUNNERPORT default 7719. Incoming requests carry a base64-JSON x-job-meta header containing a cmd string plus a gzipped cod...