Malicious code in cspell-esm (npm)

Source: amazon-inspector 6e857800f57969e257ed22cd056f2e4a4395de09ac9b69becd0c7c2b931314ab Package name resembles the widely-used 'cspell' library but its main entry index.js exports an empty object and provides no functionality. Its package.json pins its sole dependency 'ltidisafe' to a raw HTTPS...