Malicious code in changelog-duplex-hermes-mini-css-extract-plugin (npm)

The package changelog-duplex-hermes-mini-css-extract-plugin was found to contain malicious code. --- Credit: OpenSSF source...