Malicious code in @ethers-js/contracts (npm)

Source: amazon-inspector 06aee7d1e943a9d9a705acf4f28286eb5460ab9a56057a0811274787478f7c68 Package impersonates the ethers project real releases publish under ethers and @ethersproject/, not @ethers-js. The postinstall lifecycle script in scripts/postinstall.js is obfuscated with \x-hex-encoded...