Malicious code in @harrysforge/icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1c18e6ed5c1ebadaac3b5b8e4775f88140304ae0d97ab097dadcefdd907de2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...