Comment by byutifu

This article has a lot of information and ways to check & clean: https://safedep.io/keyv-npm-supply-chain-compromise/