MAL-2026-10115 Malicious code in fmt-date-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8dad7bd90f4cb0dbb1d4ce933bc39f04aefe4940a53605e5c3f30c48a313e4 On npm install, the package's postinstall lifecycle script runs the id command and transmits the resulting user/group identity to a hardcoded bare-IP...