Malicious code in axle-react-native-app-sync-client (npm)

--- Credit: OpenSSF source...