MAL-2026-16342 Malicious code in pflag29424 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b974c9d8555f026dfc5556c4f628d366fbaedca83eab549559fe95fc984602 index.js the package's declared main unconditionally executes on module load: it calls fetch'/profile', scans the response for a DGA... token, and...