Malicious code in ach-detail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136c9cd3535c5ebb047f79bd6de88016db816903f1623cf96b5e765c78cab97e scripts/preinstall.js runs automatically on npm install and collects host identity from the installer machine — os.hostname, OS type/version/release,...

Malicious code in fastify-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d824f75a77642b33c2c29524f9decca40c16a12aabe0a2528f3d90deac8720 The package's exported getPlugin function fetches JSON from https://svganchordev.net/icons/105 and passes the response's data.credits field to new...