Malicious code in @ppa-web-components/ppa-builder (npm)

Source: amazon-inspector cc4615498b50aa4b5f39a8367c44e6a18d4a7272ae71235716a152b2933d5ddd The package is described as a 'Compatibility shim' and ships a stub Proxy-based main plus beacon.cjs. The package.json declares scripts.postinstall: 'node beacon.cjs', and the main entry also invokes the sam...

Malicious code in @ppa-web-components/ppa-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4615498b50aa4b5f39a8367c44e6a18d4a7272ae71235716a152b2933d5ddd The package is described as a 'Compatibility shim' and ships a stub Proxy-based main plus beacon.cjs. The package.json declares scripts.postinstall:...