GHSA-vv52-3mrp-455m Malicious Package in m-backdoor

• npm m-backdoor: >= 0.0.0 (no fix yet)

All versions of `m-backdoor` contain malicious code. The package downloads a file from a remote server and executes it as a preinstall script. At the time of the release of this advisory the downloaded file only defaces websites by removing elements randomly from the DOM. Recommendation Remove the package from your system.