Malicious code in byfron (npm)

The package contains code to download and execute an infostealer payload...