Malicious code in fast-glob-fast (npm)

Source: amazon-inspector 92ced9e788505da600a8b79bef3678101e5a0480e6b8ddb754e9472c8a63cf63 Package name typosquats fast-glob. On npm install, the declared postinstall script resolves the installer's per-platform /.ssh/authorizedkeys path darwin/linux/win32, creates /.ssh if missing, and appends to...