Malicious code in @railone/image-utils (npm)

Source: amazon-inspector ebec05d8415347cef93849315a26f4221e34efa278fffe1b89700af039246dc6 On import, index.js calls initialize which spawns a detached, stdio-suppressed, windowsHide node loader.js child init.js and records its PID. loader.js HTTPS-fetches JSON from...