Malicious code in friendstimeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8f7888d06bb1ddd45d6396b09f7cea40db78ee517be600208c479ec5e36fb0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...