Malware in transform-es2015-unicode-regex

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in transform-es2015-unicode-regex (npm)

Source: amazon-inspector e85a13111400ea4b22bb2ae0d51ad784a89bc548d56b496a855bf7e6d6595804 package.json declares the package's own name as a dependency and devDependency with the specifier http://pack.nppacks.com/npm/transform-es2015-unicode-regex, a plain-HTTP, non-registry, third-party host...