Malicious code in server-authorized-cleanup (npm)

Source: amazon-inspector ba50dd2c597a65e5fa5bd8aa2675ac16fb443c6d42381921fde160c9596f44d2 server-authorized-cleanup exposes triggerCleanup which issues an HTTPS GET to the hardcoded author endpoint https://testback-2aqe.onrender.com/can-cleanup authenticated with a hardcoded x-api-key header and,...