Malicious code in @bmw-ds/components (npm)

The package @bmw-ds/components was found to contain malicious code...

Malware in @bmw-ds/components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...