mal-2026-16268 – package or dependency containing malicious code

The package contains malicious code or a dependency that contains malicious code. The code hides functionality to exfiltrate specific files from the user's machine. The file paths suggest it may have been intended for use in a CTF-like environment.