— npm MAL-2026-4833 · GHSA-w574-hfjv-7w24 Malicious code in bulletproof-json (npm) Modified: 5/27/2026