Malicious code detected in tile.json: This appears to be a typosquatting/supply chain attack. The package name 'tessl/npm-babel--helper-module-transforms' mimics the legitimate Babel package '@babel/helper-module-transforms' (note the double dash and different namespace). The 'describes' field references the real package 'pkg:npm/%40babel/helper-module-transforms@7.28.3' but with a slightly different version (7.28.1 vs 7.28.3), suggesting this is designed to confuse users into installing a malicious impersonator of a widely-used Babel dependency.