Malicious code in vwfs-mustang (npm)

The package vwfs-mustang was found to contain malicious code...