aegis-runtime @1.0.0

Summary

The package's declared postinstall hook runs node src/test.js , which issues an HTTPS GET to https://workconfig.vercel.app with TLS certificate validation disabled ( rejectUnauthorized: false ) and passes the response body to new Function('require', data.toString())(require) , executing the fetched payload with access to the installer's require at npm install time. The destination is a mutable, non-registry, non-publisher host unrelated to the package's advertised purpose. Package metadata presents the module as a Node.js runtime monitoring and diagnostics toolkit and lists the placeholder author Your Name ; the postinstall behavior is unrelated to the advertised monitor sources.

Source: amazon-inspector (a66d1f02c3c943836d41a7ec92c150c5529880890a4cc502115412dddb0c519c)