Hi,
We would like to gather more information regarding this advisory. the npm package reported is our internal npm package which is not even publicly available on npm. we want to understand why its being reported as malware as we dont see any such behavior in the package.
Thanks
Azeet