Malware in @spending-behavior-ui/widget-insights

A malicious package named @spending-behavior-ui/widget-insights was published to npm and contains malware. Any computer that has installed or run this package should be considered fully compromised.\n\nThe malware grants outside entities full control of affected systems. All secrets, keys, and credentials stored on compromised computers must be rotated immediately from a different, unaffected system.\n\nWhile the package should be removed, complete removal of all malicious software cannot be guaranteed due to the level of system compromise. A thorough security audit and potential system rebuild may be necessary for affected users.