Malicious code in test_adminet (npm)

Source: amazon-inspector e1971734ce6221624b53d3647a5881c1fe0bc7f8ae4d383a5ff2a9f5080da57c The package's package.json declares a preinstall hook that runs index.js. On npm install, index.js uses childprocess.exec to curl-POST installer identifiers $whoami, $hostname, id output together with the...