Malicious code in gs-uitk-object-utils (npm)

Source: amazon-inspector 662b350826118282a93e76c970ab25659d7bc3a52c58e1e16466e4c432d0d1e5 package.json declares scripts.install: node index.js, which requires ./lib/core. lib/core.js reads the OS username, hostname, and current working-directory basename, assembles them with a hardcoded goldman1...