Malicious code in beautiful-ui-monitoring (npm)

Source: amazon-inspector ca55a4e9c07b4e285b702c515ae40bba4c641662d4513f2e26cb99e111cd3101 [email protected] advertises itself as a UI package description 'creates a beautiful ui design', keywords c/gcc/native but ships no UI code. Its postinstall script invokes gcc -shared -fPIC -o...