Malicious code in path-internal (npm)

Source: amazon-inspector 5393cf6d8cf49c2550e7cc90ff3de58b1e97bdc89183f63beae60b3e46b9d2e0 The package presents itself as a copy of the Node.js core path module name path-internal, README: "exact copy of the NodeJS 'path' module" and ships the upstream Joyent path implementation with a malicious...