Malicious code in discord-vibegrations-api-natives (npm)

Source: amazon-inspector 9cb64ecc29aa68ec4659bab280f4ffd2c3de889cc966c0974f85b0c488edc603 On npm install, the package's postinstall.js opens a TCP socket to 5.tcp.eu.ngrok.io:15496 and pipes the socket's bytes into the stdin of a spawned sh process, with the shell's stdout/stderr piped back to th...