Malicious code in @ppa-web-components/ppa-searchform (npm)

Source: amazon-inspector c9b929e77e53b5f528d874024d0cf8cfe4a0e34845796964600b0e1511e6a49c The package ships a beacon.cjs that is wired to run both via the postinstall lifecycle script and from top-level index.js on require. On execution it collects host identifiers hostname, install path, current...