OpenSSF/OSV advisory MAL-2026-7428 confirms this npm version as malicious. Malicious code in timelycare (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in timelycare (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms timelycare@1.0.0 as malicious (MAL-2026-7428): Malicious code in timelycare (npm)