Malicious code in tcfm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6185adf1d252251bd7c49a8d506c28faa5d2b77384942cae6e3b6be34c936852 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...