Malicious code in @galicia-toolkit-nestjs-20/commons (npm)

Source: amazon-inspector 5b719740efc4b3e93e85668e2e787b39a8d91e15abbe9c39f5d156e118745caa On require, index.js loads a bundled ELF native addon at prebuilds/linux-x64/metrics.node inside a silent try/catch. The addon reads CI/cloud credential environment variables AWSSECRETACCESSKEY and related...