Malicious code in airkey-mfa-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03026bf6133183ffaba772b4b1f585bab0a42ab87823a0a2375a7f1cba08661e package.json declares a preinstall hook that runs index.js on npm install. index.js collects host and user identity data — hostname, platform, arch,...