MAL-2025-38275 Malicious code in vfh4 (npm)

The package vfh4 was found to contain malicious code...