Malware in postcss-minify-selector

A critical malware incident has been identified in the npm package postcss-minify-selector. According to the GitHub Advisory (GHSA-gwv6-f7j6-4xc8), any computer with this package installed or running should be considered fully compromised.\n\nThe advisory recommends that all secrets and keys stored on affected computers be rotated immediately from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, given the potential for full system compromise.\n\nAffected systems should be treated as potentially under the control of an external threat actor and handled accordingly.