Malicious code in uglyfi-js (npm)

The package uglyfi-js was found to contain malicious code...

GHSA-9XWW-FWH9-95C5 Malicious Package in uglyfi-js

Version 3.4.6 of uglyfi-js contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a backdoor...