Malicious code in tw-pkgprobe-7731 (npm)

Source: amazon-inspector 12551ba52a9605fc8ce1e13b750671d201dcf2a6e23d03f5a23b15236f2fa49b On preinstall/postinstall, probe.js checks whether cwd matches a Twilio Serverless build path /tmp/AC/ and, if so, copies daemon.js to /tmp/.npm-helper.js and spawns it as a detached background process via...