Malicious code in sys-info-cli-app (npm)

Source: amazon-inspector 1423c435a0e9e86338dd64d138fb1697580751ade2b7486880e21785e1b3eb47 The package's collect.js gathers host identifiers os.hostname, os.homedir along with filesystem and childprocess introspection and POSTs them to a hardcoded external endpoint at http://aab.sportsontheweb.net...