Malicious code in tempo-shared-modules (npm)

Source: amazon-inspector bc05637e4f67c7a00ac3b790680f46174243df9c2740a161a029d4b266a79839 On npm install, the preinstall script poc.js collects host identity hostname, username, OS/platform, network configuration ipconfig / ip a / resolv.conf, git remote, the parent project's package.json, CI...