Malicious code in @thomlecter1122/lab-helper-test (npm)

Source: amazon-inspector 75adb75a0025882efbcde3ddd88882aaaedfd692425222eda99c148096f1f58a The package ships a postinstall lifecycle script seccheck.js that fires automatically on npm install. The script first checks whether the host has a non-internal IPv4 address beginning with 192. a...

Malicious code in lab-helper (npm)

Source: amazon-inspector 9bbde4e4075983db0c5aba255bc29f84fb2536681b13e8289412cce5c3ee7a2e On npm install, the package's postinstall hook runs seccheck.js, which enumerates the host's network interfaces and proceeds only if an IPv4 address begins with 18.175. — a subnet-based targeting gate that...