Malicious code in helper-agent (npm)

Source: amazon-inspector 4ab651b6042b8ef6c2c986a58d276931d9353d723fd914c9b7c728cac5cf0fc9 The package declares a postinstall script node probe.cjs that fires on every npm install. On execution it POSTs install-start and status markers to a hardcoded webhook.site dead-drop...