MAL-2025-6026 Malicious code in synckit (npm)

This package installs a windows based malware file node-gyp.dll via install.js...