— npm MAL-2026-6092 · GHSA-4wmf-8x9r-34cc Malicious code in fmt-helpers-794b (npm) Modified: 6/18/2026