Malicious code in @devmikets/hyperliquid-sdk (npm)

Source: amazon-inspector c401f279d5ea91e416e18e54888c22d1087a44449aa9629dfb86f3c5945ec903 package.json declares inquirer with a tarball URL pointing at registrynpmjs.to — a domain that typosquats the official npm registry registry.npmjs.org. Running npm install fetches and installs whatever tarba...