Malicious code in @mexc/shared-utils (npm)

Source: amazon-inspector c6d793d1ff65b7f5a24e1aa0c176eaa5d83c7870e05cca5b64f22edb9ca7ded7 Package published to the public npm registry under the @mexc scope without evidence of scope ownership. package.json declares a postinstall hook "postinstall": "node postinstall.js" that runs on any installe...