Malicious code in css-hnhxwd-polyfill (npm)

The CERT source reports malicious code in the css-hnhxwd-polyfill npm package. Any computer on which the package is installed or running should be considered fully compromised.