MAL-2026-18257 — Malicious code in the insta-api-wrapper npm package

The source reports malicious code in the insta-api-wrapper npm package. Any computer on which the package is installed or running should be considered fully compromised.