— npm MAL-2026-4275 · GHSA-hgq8-x9x4-jfpr Malicious code in async-pipeline-builder (npm) Modified: 5/25/2026