Malware in @nebula.js/sn-listbox

A malicious version of the npm package @nebula.js/sn-listbox was identified and published to the npm registry. The package contains malware that grants full control of affected systems to an outside entity.\n\nAny computer with this package installed or running should be considered fully compromised. The malware may have provided attackers with access to secrets, keys, and other sensitive data stored on affected systems.\n\nImmediate action is required: all secrets and keys stored on affected computers should be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the compromise.