Malicious code in @drone-js-ext/core (npm)

Source: amazon-inspector 9173b1e0c1d01cafb58dfbcad8b59a50f49700cc911e22df2787f5a92b4c6e43 The package ships a beacon.cjs that collects host identifiers hostname, install path, current working directory, Node version and POSTs them in cleartext to the hardcoded bare-IP endpoint...