NPM package caught using QR Code to fetch cookie-stealing malware

https://www.bleepingcomputer.com/news/security/npm-package-caught-using-qr-code-to-fetch-cookie-stealing-malware/