Backdoored NPM files posing as AWS tools

Runtime extraction of malicious code from jpegs included in the library