Malicious code in rollup-runtime-core-polyfills (npm)

Source: amazon-inspector 868d4b253cfa762cd40d8064b3a99cbed00203fbed19402d5033551720690199 The package presents itself as a rollup polyfill plugin and copies the source of rollup-plugin-polyfill-node repository field points to FredKSchott/rollup-plugin-polyfill-node, but dist/index.js appends a...

Malicious Package

Overview rollup-runtime-core-polyfills is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...