MSC-2025-7670

This package version was compromise to include malicious code. This version contains a post-install script that executes on Linux and macOS systems, harvesting sensitive files including cryptocurrency wallets, SSH keys, environment variables, and authentication tokens for GitHub and npm. The...