Malicious code in smb-common-uikit (npm)

Source: amazon-inspector 66072ca2fc20c19a01d0a2b888d90632a7d9bfdc34a2d1a71b61ad06975eae5c package.json declares a preinstall hook that runs index.js. On npm install, index.js collects host reconnaissance from the installer os.hostname, os.userInfo, os.platform, os.arch, homedir, uid/gid, shell,...