redis-cookie-server@1.0.0

Analysis

redis-cookie-server@1.0.0 is a renamed copy of the supertest HTTP-testing library (its code is verbatim supertest, and its manifest points at the supertest repository) that declares a dependency on the malicious package eslint-prettier-js@^0.0.1. Installing redis-cookie-server transitively installs and executes eslint-prettier-js, which carries the malicious payload. The package name and description are unrelated to the actual code, and the malicious behaviour is delivered through the injected dependency rather than the bundled source.