Malicious code in checkmate-remediation-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f55d0ebeea19e228ec6edbb1782df87539c476478d3935559fda90a458b1b4 The package's package.json declares a preinstall hook that runs index.js on npm install. index.js collects os.hostname, os.userInfo, the home...