Malicious code in google-fonts-to-wordpress-collection (npm)

--- Credit: OpenSSF source...