Malicious code in pg-expense-example (npm)

Source: amazon-inspector d1d939ad3f0e8e9754bf3562f06692713a76d5c0f18ac13c956f9cb199ed0fbf On require/load, index.js unconditionally collects host identifiers hostname, username, platform, arch, cwd, pid and sends them as URL query parameters via HTTPS GET to a hardcoded Burp Collaborator-style...