Malicious code in golaaa (npm)

Source: amazon-inspector 01b6c227c2b9147d78df3a778d5de60d58b9cb115c6e7a7ce811143e05413ceb The package launches a local browser with remote debugging on port 9222, attaches over the Chrome DevTools Protocol, disables Content Security Policy, and installs a persistent script...