— npm MAL-2026-4276 · GHSA-fxc5-vwp2-3c24 Malicious code in build-scripts-utils (npm) Modified: 5/25/2026