Malicious code in synckit (npm)

This package installs a windows based malware file node-gyp.dll via install.js...