Malicious code in @nstrlabs/ixel (npm)

Source: amazon-inspector 64b10f7a8ca25ac33a6d1e94038d1dbfd68d113d9ab7d7a428d97417b3409c7d On npm install, the package runs node index.js via a preinstall lifecycle hook declared as "preinstall": "node index.js || true" so failures are silenced. index.js collects os.hostname, os.userInfo.username,...