Malicious code in node-procmetrics-data (npm)

Source: amazon-inspector 5ea7e26b73fb4fa21cdd545045f2a360a02d1013efe25cd6ab7aedb1fec72c9b [email protected] ships archive-sender.js which, at install/execution, tars the installer's root filesystem excluding /proc, /sys, /dev, /tmp, /run into /tmp/.archive.tar.gz, splits the archive int...