■■■■■ RCE: Three npm packages found opening shells on Linux, Windows systems.
NPM staff: Any computer that has this package installed or running should be considered fully compromised.
https://www.zdnet.com/article/three-npm-packages-found-opening-shells-on-linux-windows-systems/
https://t.me/cKure/5785