WS-2019-0410

colour-string contains a malicious code as a preinstall script. The package downloads a file from a remote server, executes it and opens a backdoor...