Malicious code in hellosign-embedded-cla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e040d099ac8087da48a2e03051478f6929f6ccc2c841992999d9160c6d8ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...