Malicious code in catqrcodeconverter (npm)

Source: amazon-inspector 3333f7b95e551ebf6ed266fb1de661b7419520ed3a922b05910ede132c7d6757 Package [email protected] wires both preinstall and postinstall lifecycle hooks in package.json to execute scripts/run.js. On npm install, run.js reads the installer's OS username via os.userInfo and...

Malicious code in cat-sis2go-utils (npm)

Source: amazon-inspector ad357542f3dd0e1b598ef36d440b1868ac28c6889226864bf799b2f7b6bf5e91 Package [email protected] declares both preinstall and postinstall lifecycle hooks in package.json that execute scripts/run.js on every npm install. The script unconditionally issues a DNS lookup again...