Malicious code in hex-encode-utils (npm)

Source: amazon-inspector 999c0a7bda643ce11c335436392aac35c2eca53dc92225dd86cbc01cc9015f8c On npm install, scripts/compat.js runs as a postinstall hook and fetches an AES-256-GCM-encrypted blob over HTTPS from two hardcoded Cloudflare Workers hosts steel-mere-4155.ricardorichp.workers.dev,...