MAL-2025-38540 Malicious code in vocab-practice-js (npm)

The package vocab-practice-js was found to contain malicious code...