— npm MAL-2026-4314 · GHSA-rj44-v8w3-c5q5 Malicious code in expo-config-plugin-typescript (npm) Modified: 5/25/2026