If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: amazon-inspector (a01d746e2ab5362af396f0bafe921bcd6aed22b8321555ccb16d0f8f7a5c9183)
The package was found to contain malicious code or consuming dependency that contains malicious code