Malicious code in event-bus-lite-testmetest (npm)

Source: amazon-inspector 038b62e6040cef7e651f3cf89c146290f391c28977fe206410408e85ccbe4721 The package ships a binding.gyp whose target has type "none" and no C/C++ source files; its only purpose is a GYP !... command-expansion that runs node index.js during the automatic node-gyp rebuild triggere...