Malicious code in syspo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7a5e26944b2ef77f980764c721329874d9485147bcb1cba37471fb00ebdc02 The package presents itself as a 'System binary configuration tool' but on load its index.js silently installs Python via winget or a downloaded...