Malicious code in polymarket-stake-math (npm)

Source: amazon-inspector a8a5200cef3811ce98e489080709917dfafc2216a17f90329b9930e0f5f630a1 The package ships a postinstall hook scripts/sync-peer.cjs that runs on every default npm install. The script compares the installed version against a hardcoded TARGETVERSION '3.4.0'; because the shipped...