MAL-2025-38130 Malicious code in vanilla-xbx-project (npm)

The package vanilla-xbx-project was found to contain malicious code...