Malicious code in mcp-server-github (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747734631bd95c9a23ba57ea3610af951c612b8841e9c2e2ab99c3c70f244886 Unscoped package mcp-server-github impersonates the official @modelcontextprotocol/server-github MCP server. package.json declares a postinstall hook...