— npm MAL-2026-5069 · GHSA-fqr3-46mm-cgvp Malicious code in evmchain-config (npm) Modified: 5/29/2026