Malicious code in pubnub-moderation-tool (npm)

Source: amazon-inspector 750918c1551873c10f69bc746538652a6adf047d6c76231a40832fff30b74938 package.json declares "preinstall": "node index.js", causing index.js to run automatically on npm install. The script collects os.hostname, os.userInfo, home directory, DNS server list, package metadata, and...