Malicious code in simple-date-formatter-new-10 (npm)

Source: amazon-inspector c1cc0707c5a58067075648ef1c040ceeb07c2550b9f06d53b5c8c41ec167c841 [email protected] presents itself as a trivial date-formatting utility but ships two attack payloads that fire when npm installs the package. The package.json postinstall script opens an...