MSC-2026-6444

Install-time system recon. package.json postinstall runs build.js, which compiles src/monitoring.c and loads it. monitoring.c declares attributeconstructor monitoringconstructor calling initmonitoring, which runs popen"/usr/bin/id" and writes the captured uid/gid/group list to /tmp/monitoring.log...