MAL-2025-25604 Malicious code in lostbut (npm)

The package lostbut was found to contain malicious code...