Malicious code in bucko (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f56df54ee38953facf57f14d4e907607d92e96d3c5aed0b4ea26e85aa915bd29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...