Malicious code in saaa9 (npm)

Source: amazon-inspector 3011e5a125f4db4febea1bf6778ed69ebb11009d2a1b119a46118822f3ef6e93 The package is published as a 'System binary configuration tool' but the shipped code is a covert Windows surveillance overlay. On execution, index.js spawns wscript.exe against the bundled starttool.vbs,...