MAL-2025-16633 Malicious code in castdemo (npm)

The package castdemo was found to contain malicious code...