⚠️ MALWARE ALERT ⚠️
This needs more coverage as it has some serious implications. If you're using karma with your kotlin.js projects, you're likely to be exposed to this. One of karma's dependencies was recently infected with malware. This is already confirmed to try to install a cryptominer as well as steal your passwords and cookies from your browser. Read the thread and linked gh issue for things to check.
It's also confirmed to affect both, Windows and Linux.