Malicious code in bcoin-full (npm)

This package exfils sensitive data to a attacker-controlled domain via index.js. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461f982127682ae24a143dec087c7d0d27c8c37ec4f549d4037e996508f66981 Any computer that has this package installed or running should be...