Malicious code in npm-wold (npm)

Source: amazon-inspector 731c22e563f2ea15800d87f345de9b8363c0c715e9f39606201d47a8fb422ab1 [email protected] declares a postinstall script node dist/config.js that, on npm install, issues an HTTPS GET to the hardcoded endpoint https://my-api.trade-api.workers.dev?id=4 and uses fields from the JSON...