Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.

...

Malicious code in reveal-js-multiplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f48aa8081ed1a2e8a4b59b74c1097ae2b1861b70d93048215cafc0b507543d2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...