Malicious code in curse-allies-module (npm)

Source: amazon-inspector 15e9740e7be22c3d68a1784e48d3e87414347b5e5697397ef0d8ab2295619962 On npm install, the package runs a postinstall lifecycle script node probe.cjs that issues an HTTPS POST to a hardcoded webhook.site collector URL https://webhook.site/a4bf0f9f-6d96-46e6-80ac-b76a5329f481 wi...