Malicious code in @s4yhiitestpoc/r2-https (npm)

Source: amazon-inspector b6042f718b39be380eeda7c31dc46b056e753cb8a39e51897c8106e49b44f4d0 On npm install, the package's declared postinstall script postinstall.js collects installer host fingerprint data — hostname, username, home directory, platform/arch/OS release, current working directory,...