Malicious code in @hzero-front-ui/c7n-ui (npm)

Source: amazon-inspector 836c7ea4bdd57db38273e1e017c5a977d397cf321d36e5dbdd8060fbcd8ca08e Package @hzero-front-ui/[email protected] is an empty library whose only functional code runs in preinstall and install lifecycle hooks in package.json. Those hooks collect the installer's identity — whoami,...