— npm MAL-2026-4576 · GHSA-7pxc-2jp3-w7c8 Malicious code in hardhat-gas-analytics (npm) Modified: 5/26/2026