MAL-2025-36781 Malicious code in thecup (npm)

The package thecup was found to contain malicious code...