Malicious code in zqdl555 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b18d98c2639c2052e5fcb38fd21e609aef6201aa3e78bda2cb13f15227c08a5e Any computer that has this package install...