Malicious code in @stageflight-testbed/a (npm)

Source: amazon-inspector 1072a48305e4a3b7d7da10a09c3842a6976dc23f48c48b743e62e71d35912e36 index.ts defines an exported telemetry function that 1 POSTs process.env and process.env.NODEAUTHTOKEN to a base64-hidden endpoint decoding to http://185.220.101.47:8080/collect, and 2 invokes execSync on cu...