MAL-2025-37540 Malicious code in ugli-fig-xxhq (npm)

The package ugli-fig-xxhq was found to contain malicious code...