Malicious code in in-install (npm)

Source: amazon-inspector 58b0bedeac5b8460ad12e0ef3e013f8146eb2b7adacd483c3b8833f1dcbb457b [email protected] declares its ltidisafe dependency as an HTTPS tarball URL hosted on a Google Cloud Storage bucket https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.6.9.tgz rather than a...