MAL-2026-5808 Malicious code in surf-lending (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee48ee7b6045907414fd157235c904e9de41a64666deda286a011e0abc17b6e On npm install, the package automatically runs node index.js via scripts.preinstall. The script collects host identity hostname, username, cwd and...