Malicious code in postcss-semantic-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c91b39929f03c30e501726fc2d1c1fa43f17bf2ed77bda52380e563c1171e0 The package advertises itself as a zero-runtime CSS theming kit but on require/import executes a chain of obfuscated JavaScript modules. lib.mjs...

Malware in postcss-semantic-themes

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...