— npm MAL-2026-5507 · GHSA-qjp2-ccc7-vjv9 Malicious code in crypto-promise-js (npm) Modified: 6/10/2026