MSC-2026-6425

Malware wrapper: package has no code of its own; its sole dependency pulls in discord-vibegrations-api-natives whose postinstall opens a reverse shell to 5.tcp.eu.ngrok.io:15496. Dependency-based dropper...