Malicious code in figlet-chalk-render (npm)

Source: amazon-inspector 992cf49b88be09149971d4ac18fe2a4b61d242186f553cb3283a26970b886d7f The package is advertised as a chalk+figlet wrapper but index.js contains a top-level IIFE that runs on require. On Windows hosts, it reconstructs the module names 'https', 'os', 'fs', 'path', and...