Malicious code in cm.icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82882ce314ad2b57a73f7dd4b134c17f6dad7972db0b8dcb9bf132038c3ea616 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...