Malicious code in exodus-firestore-synchronize (npm) - 爱游戏

Source: amazon-inspector 210b71fe2403143719408cea9a34626d7788c9aaa87b3f5a1276a92bd5578ce6 package.json declares a postinstall hook that auto-runs on npm install and executes whoami and hostname, then enumerates process.env for keys matching /TOKEN|SECRET|KEY|AUTH|npm/i and prints the matches to stdo...