NPM staff: Any computer that has this package installed or running should be considered fully compromised.Read more from the Source Post navigationPolitical campaign emails contain dark patterns to manipulate donors, voters US charges Russian hackers behind NotPetya, KillDisk, OlympicDestroyer attacks