Malicious code in backpack-ios (npm)

Source: amazon-inspector 25f0d7ea98cef4ddcac8af3b854c37c1a8a3246a13357af60cb36589454657b5 package.json declares "preinstall": "node index.js", causing index.js to execute automatically on npm install. The script collects host identifiers os.hostname, os.userInfo, homedir, DNS servers, cwd, full...

Malicious Package

Overview backpack-ios is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...