Malicious code in rand-txs-sdk (npm)

Source: amazon-inspector 383599a80e18acfe3bbf819e2c1cc5ec27a4663b2da9e18c7755000857196dc9 The package advertises itself as a random-transaction generator but its exported getTransactions API triggers execution of a hidden code payload. loadtransactiondata reads per-record 'mark' strings from...