Malicious code in integration-amplitude (npm)

Source: amazon-inspector dcd9ffdf0c07f64af4034ec76aea284a6290f4633f2c80eefa65579c1a297bfb package.json declares the package's own name as a dependency whose source is the bare HTTPS URL https://repo.securityctrl.com/integration-amplitude rather than a registry version range. On npm install, npm...