Malicious code in node-stack-frames (npm)

Source: amazon-inspector 5fd4f6c5f3278484d99f6ffffc001cf920dcb0fa4fdfabff957a61c3cfbfc158 package.json declares a preinstall script that runs an inline Node program on npm install. The script requires os and http, collects os.hostname, os.platform, and os.arch, base64-encodes the result, and issu...