Malicious code in mtrtestinglalalal (npm)

The package communicates with a domain associated with malicious activity...

goodpkgmamamamamamam (1.0.0) potentially affected by unknown CVE via mtrtestinglalalal (0.0.1-security)

mtrtestinglalalal NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mtrtestinglalalal and may be impacted: - goodpkgmamamamamamam 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-5040...