A remote script loader module found in the malicious npm packages, which fetches JavaScript from a GitHub repository through the jsDelivr CDN without Subresource Integrity checks, allowing arbitrary code execution in visitors' browsers.
A remote script loader module found in the malicious npm packages, which fetches JavaScript from a GitHub repository through the jsDelivr CDN without Subresource Integrity checks, allowing arbitrary code execution in visitors' browsers.