Malicious code in pulse-pwn-9f3a2 (npm)

Source: amazon-inspector f8086e23ce4b6ff1ca043ca8d9c83f384455e0baee3d06cd79e8a0d5d52c04e1 index.js contains top-level code that fetches /profile and sends document.cookie together with the response body to a hardcoded webhook.site URL https://webhook.site/42c6d937-77c7-42a5-8678-ef06b4501e38 via ...