Malicious code in @zzzcrypto/bitcoin-lib (npm)

Source: amazon-inspector f9d633d3efb27db376be57d77ebbd808db458d088503adebe2f7ad7501281dd1 On require, index.js serializes process.env together with hostname, username, homedir, platform, cwd, and a timestamp, base64-encodes the JSON, and sends it via HTTPS GET to api.telegram.org using a hardcode...