Malicious code in @wagni_bot/orca-sdk (npm)

Source: amazon-inspector 6fcc40768d3a7cdf73ca8664e00519e42639493a81144d6310af862b91816273 @wagnibot/[email protected] ships a single file, postinstall.js, which is registered as the package main and as both the preinstall and postinstall lifecycle scripts. On npm install, this script executes...