MAL-2026-14025 Malicious code in alelo-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5aceecfb22fd66b4e0861399aa6864ba19a983f3483294dd0740e7e24d1c34 On npm install, preinstall.js collects hostname, username, platform, cwd, and the full process.env and POSTs the payload over HTTPS with TLS...