Malicious code in solana-rpc-pool (npm)

Source: amazon-inspector 59e128b9efb48222aac63385175a13c182fc4f832f83576eb80f7777f255048c On npm install, the package's postinstall hook runs install.js which performs four independent attacker-benefit actions. 1 Credential theft: it reads /.ssh/idrsa, /.aws/credentials, /.config/solana/id.json,...