MAL-2025-33446 Malicious code in smart_todo (npm)

The package smarttodo was found to contain malicious code...