Malicious code in tt-help-cli-ycl (npm)

Source: amazon-inspector e6144be61d70f258741e5d4cc1476021f93e3ce82ffa00a3f86189537a1438a6 The package's tt-help watchdog subcommand starts a long-running agent that POSTs heartbeats to a remote server default hardcoded to http://117.71.53.99:17301, referenced in src/lib/constants.js and the...