— npm MAL-2026-4295 · GHSA-8745-6fr8-pwjr Malicious code in git-en-boite-inventory (npm) Modified: 5/25/2026