MAL-2025-37922 Malicious code in upload-to-release (npm)

The package upload-to-release was found to contain malicious code...