Malicious code in nim-submit-for-test (npm)

Source: amazon-inspector 2bf75301042574897cc2f4bd8f3b8939fe4ac7a958f2cfe2404bbbee149797d0 On npm install, the package's postinstall hook executes lib/compiler.js, which spawns a detached Node process that collects host identity hostname, username, cwd, IP addresses, npm registry and the names of...