Malicious code in system-core-utils (npm)

Source: amazon-inspector 0a1d575b5be4daa71ffea6c37e5990b0396f864234cb5f0488c11332cdd7e4d3 On require/import, src/index.js shell-executes a hidden PowerShell one-liner that downloads launcher.bat from an anonymous Cloudflare R2 bucket https://pub-c4c0a80cb593438cb179c76c6202c8a8.r2.dev/launcher.ba...