Malicious code in @activepieces/piece-google-bigquery (npm)

Source: amazon-inspector acc3321f587f5a8efea8256aeb935a905df2da5f5a901cd8f7355a75e3832da3 The package presents itself as an Activepieces connector for Google BigQuery but src/index.js combines require"childprocess", an OS reconnaissance command ping, and multiple POST calls to an external endpoin...