Malicious code in paysafe-js (npm)

Source: amazon-inspector a1dc1a7847e47ee850fe8a4011ce83950962ab65cc742eb52919d13abe431e59 [email protected] impersonates a Paysafe payments SDK package name, description "Paysafe JavaScript SDK", and repository URL github.com/paysafe/paysafe-js but its index.js contains XOR+base64-obfuscated logic...