Malicious code in hyatt-avatar (npm)

Package collects system info and sends to untrusted server, plus suspicious install scripts indicate malicious behavior. The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious code in ghazaly (npm)

Source: amazon-inspector d2054792481618ddf941c251fc0793ec8c1b85fe14107567b5c29cac9330d5be package.json declares a postinstall hook that executes index.js on npm install. index.js requires os, https, and childprocess, runs whoami via execSync, and reads os.hostname, process.cwd, and non-internal...