MAL-2026-12491 Malicious code in uploader-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434cb8e84402c02f52788e51215db45b8c7f2f229d56c51d8302993b782cf911 The package's scripts.install runs node index.js, which loads ./lib/core and, on npm install, collects the installer's OS username via...

Malicious code in arc-diag-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f08d97107d726a6ae90afbf8e354b84a7e13d4a236bc8766180a362cc8344c On npm install, the package's postinstall hook runs id to capture the installer's uid/gid/group identity and opens a raw TCP socket to...