Malicious code in 1cat-tunnel-client-zx (npm)

Source: amazon-inspector 796f1b18c13a38088b4e48d75575eb92b23af5d91cdfaf6a82717f0fabbc7a79 On npm install, the package's postinstall hook node install.js fetches a platform-specific executable from http://156.226.174.161:8888/binaries/tunnel-client- over plaintext HTTP, writes it to the package's...