Malicious code in @broadpeak/smartlib-ad (npm)

Source: amazon-inspector 45df33d93645560085a7efe94308b0e3d846f30c829f2d2804bcdb1245626289 package.json declares preinstall: node index.js, which fires automatically on npm install. index.js loads childprocess/os/https, runs whoami and id, collects host identifiers os.hostname, os.platform, os.arc...