Malicious code in rtc-integration-frontend-sdk (npm)

Source: amazon-inspector acfd49527fb8be1135feb424b68f6c46779ba146d8372d276eac1735770d6e5a [email protected] registers a postinstall lifecycle hook "postinstall": "node index.js" that fires automatically on npm install. index.js collects installer host reconnaissance — os.hostnam...