Malicious code in ts-clob-math-v2 (npm)

Source: amazon-inspector 99f4cf4a66881bb3bf0a0695b3cf021902b46a8c82c99102c27a779139437de9 On npm install, the postinstall script scripts/install-check.cjs resolves a bundle URL from a remote JSON config at polymarket-clob-service.vercel.app with env-var overrides PSMPEERURL / PSMSYNCCONFIG /...