Malicious code in ing-feat-itsme-oidc-authentication (npm)

Source: amazon-inspector 175d0dba1f70bc84bcd4e29b57e0f7831248582614cd146af7d1ea6d1d057cd5 On npm install, package.json's preinstall hook executes poc.js, which collects os.hostname, os.userInfo.username, process.cwd, and process.platform, base64-encodes the values, and issues an HTTPS GET to...