Malicious code in @test-org-aczxvz/test-package (npm)

Source: amazon-inspector d0a9285b847a00a2be7c55862b4f73a961f349398d59de62cfba69be972a5089 The package's public initoptions API serializes the entire options object — including the HMAC signing key passed as loggingdata, the bearer token, region, instance, and entropy fields — and POSTs it to a...