MAL-2025-42117 Malicious code in winston-log (npm)

The package winston-log was found to contain malicious code...