— npm MAL-2026-4308 · GHSA-c4gp-gx6v-65jq Malicious code in core-utility-tools (npm) Modified: 5/25/2026