Malicious code in lbank-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b61fe26cc73bf769451dd12b10b59aa2b2b0569b4d3c9d813b94c2d6f355d4 Any computer that has this package install...