— npm MAL-2026-6059 · GHSA-qxgr-xx42-5g6p Malicious code in express-validates (npm) Modified: 6/17/2026