Malicious code in @conduitops/logview-archive (npm)

Source: amazon-inspector f20036e315be6c5dd925bdedc87120af27adb007a4c2b6653c95cb386acd9009 On install, package.json's postinstall hook runs install.js, which invokes npm install @conduit/[email protected] --registry where the registry URL is stored as a base64+XOR-masked string in lib/toolchain.js...

Malicious code in @conduitops/logview-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20036e315be6c5dd925bdedc87120af27adb007a4c2b6653c95cb386acd9009 On install, package.json's postinstall hook runs install.js, which invokes npm install @conduit/[email protected] --registry where the registry URL i...