Malicious code in hyperion-react-native-testapp (npm)

The package communicates with a domain associated with malicious activity. Source: amazon-inspector 09dade0de8238a15a0ae8541c47a5178f3234eb654cc6afe58eaf02600ad4d47 package.json declares a preinstall lifecycle script that runs wget at npm install time, sending the installer's username $whoami,...