Malicious code in nextjsupdater (npm)

Source: amazon-inspector 3c72c588f940a53ee4432bb472a919af2dac7e6d86344c8427764f38d6412b93 The package presents itself as a Next.js update tool but its exported downloadAndRunUpdate function in index.js retrieves updater.hta from...