Malicious code in twokey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c6d8e22fd03dd5ff39bac81bcbffd05db3b2a08dcf9768332094ffcca4eebd The package's postinstall hook unconditionally executes node bin/twokey.js --desktop --enable-autostart, which performs three install-time actions...

Malicious code in 2key-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81e32736cf2a40006732966fa3aade21e325e528480f008fcc14c14dbd96732e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...