Malicious code in react-yandex-favicon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fbffe869a619ee770b50818e5f42a7e85a7f9e673bb0310f4dc6c0a7d550e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...