npm package disables Windows Defender before dropping trojan

Last week, Sonatype's automated malware detection systems flagged npm package 'flame-vali' that claims to let developers "bypass any request proxys." But that's not quite the case.

defender devzone featured malware prevention nexus firewall npm npm package package trojan vulnerabilities windows windows defender