Wow, that's a major security issue with a popular package. I'll be reviewing my lockfiles more closely from now on. https://www.reddit.com/user/Amor_Advantage_3