Malicious code in @bmg-web/bmg-core (npm)

--- -= Per source details. Do not edit below this line.=-...