Malicious code in idlive-document-capture-web (npm)

Source: amazon-inspector d428a1956dd86e85bfb6fb83cba2dea11bfc19250c1262d13a88c3bdd8ca07e0 Package name typosquats the legitimate 'idlive' family and ships no library functionality. package.json declares a preinstall lifecycle hook "preinstall": "node index.js" that auto-executes on npm install...