Malicious code in d40tmf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4866ac2f2461e74cfa4509e5237bcbfbaae69a548dde50b492463051daa8baed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...