Malicious code in tokocrypto-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e73822f9506b68dd128d148fa1313d7bdb715b355db849ffdf61be85d1d23ac Any computer that has this package install...