Malicious code in heft-parameter-plugin (npm)

Source: ossf-package-analysis 6082dd30329215006112f50c3006a58f4437a48913646c4551e68d48e2d768e7 The OpenSSF Package Analysis project identified 'heft-parameter-plugin' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...