Researcher Ricardo Iramar dos Santos discovered a mysterious dependency used the open-source package SymphonyElectron. This was a spoof of the package with the same name on the NPM registry.
Support the originator by clicking the read the rest link below.