Malicious code in evilpostinstall (npm)

Source: amazon-inspector 846e500b06f58769a2cb833be8e726ab1db04b327f4c614da6642eb46ae7dfe5 The package's postinstall lifecycle hook pipes the output of env through nc to a host reconstructed at install time from the package version string via cut -b 2-4 and cut -b 5-. For version 4127000.0.1 the...