NPM package compromised by author: erases files on RU / BY computers on install | Heykuki News