Malicious code in @sport5/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdff248c4de6b2e54f28f9861de07104fc5f14affd99aeceb5eee84947daac4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...