Malicious code in gemini-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00f5dd23fd99c43f4a7967ad84e504b88198dba9e06c1ac68e70e30ab0c90893 Any computer that has this package install...