Malicious code in consgraphql (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f1d324f3e26c4f3e05c328b7637cd3e88e8b2878fbc9df6cf039c2c5516332b Any computer that has this package installed or running should be considered...