Malicious code in semantic-release-dependencies (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 020b67d41edb23a8a7196b14ec40945dec7f238d55b82c0d7d1643568086e220 Any computer that has this package install...