Malicious code in flowcardano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21379b9b1e9f6a64a18a806531d9f1bb22394694b092eb2b26b6b4d356bd5a4a On npm install, package.json's preinstall hook runs node index.js, which collects host identity os.hostname, os.userInfo.username, cwd and scrapes...