Malicious code in developmentstelemetry (npm)

Source: amazon-inspector 98ef8863222571a8e77635ed5129c41ad9583d9df4e9e5fd61b5a07c4fb26887 package.json declares scripts.postinstall = 'node index.js'. index.js is a 143-byte stub whose only behavior is to dynamically import the sole declared dependency '[email protected]' and...

Malicious code in developmentstelemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ef8863222571a8e77635ed5129c41ad9583d9df4e9e5fd61b5a07c4fb26887 package.json declares scripts.postinstall = 'node index.js'. index.js is a 143-byte stub whose only behavior is to dynamically import the sole declar...

Malicious code in nextjsupdater (npm)

Source: amazon-inspector 3c72c588f940a53ee4432bb472a919af2dac7e6d86344c8427764f38d6412b93 The package presents itself as a Next.js update tool but its exported downloadAndRunUpdate function in index.js retrieves updater.hta from...