Malicious code in @nstrlabs/utils (npm)

Source: amazon-inspector 36d8d7c327560bb7a4c08d906db240a2dc146e20f828d9dfc5ab79497b155355 On npm install, the package's preinstall script node index.js || true executes automatically and collects host identifiers from the installer's machine — os.hostname, os.userInfo.username, dirname, and...