Malicious code in zqdl111 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad799637c930c5cdd91adee64300966d8a04c8ad1af244ca59d2e0049b86dc3e Any computer that has this package install...