Malicious code in onfiished (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc96c36223fb18318aee1121ec9d3844aafc7bea3b92dafd4439f8d140173a7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...