Malicious code in tui-react-mobile-styles (npm)

Source: amazon-inspector 30d6926a3b8c5bc55e60b4d4f98b2e06fb6c04608bb9442058516814dfb54f1b The package presents itself as a React Native/mobile UI styles library but at module load time performs a full binary dropper chain. index.js requires./shim, which runs an init at module load that reconstruc...