Malicious code in @antstackio/json-to-graphql (npm)

The npm package @antstackio/json-to-graphql was found to contain malicious code, identified by both Amazon Inspector and Google Open Source Security scanning tools. The compromise was attributed to the Sha1-Hulud: The Second Coming NPM worm.\n\nThe malicious payload performs multiple harmful actions: it steals authentication tokens and credentials, publishes them to GitHub, and attempts to establish persistence by modifying GitHub Actions. The worm is designed to self-propagate to other npm packages owned by the compromised user.\n\nAdditionally, the malicious code may destroy the user's home directory, representing a severe threat to system integrity. The incident was documented by the OpenSSF malicious packages repository.\n\nThis represents a supply chain compromise affecting all users who installed the affected package version(s).