Malicious code in ledgerflow-deploy-utils (npm)

Source: amazon-inspector 5f0097d19be676ac30ff79dffcff38f128873c80115a8a150c3eceff0422aa93 On npm install, the package's postinstall script queries the AWS instance metadata service IMDSv1 at 169.254.169.254 for the attached IAM role and POSTs the result, along with an IMDS-reachability probe, ove...