— npm MAL-2026-5842 · GHSA-mfw9-5hqc-vc53 Malicious code in browserslist-db-sync (npm) Modified: 6/16/2026