Malicious code in verify-cli (npm)

Source: amazon-inspector 081d3a8717b3f05f688cdde25d2b0de315dd9b1f400382e0db00d53f8ca82d6b package.json declares preinstall: node index.js, which runs automatically on npm install. index.js shells out via childprocess and curl to POST the installer's whoami, hostname, and id output along with...