Malicious code in vuln-package (npm)

Source: amazon-inspector a8bd105bf3b12062f312b41f2a1eead5e8481f8d3749fc78bc79ed8675c11394 On npm install, the package's preinstall script triggers a DNS lookup to a unique subdomain of oast.fun fabekzbnjtufpffkzzmvjvi5eafhny3ok.oast.fun, an out-of-band interaction service, confirming code executi...

Malicious code in vuln (npm)

The package vuln was found to contain malicious code...