Malicious code in @cognam/shared-project (npm)

The package @cognam/shared-project was found to contain malicious code...