— npm MAL-2026-6359 · GHSA-2gqj-wrf5-35w8 Malicious code in html-to-gutenberg (npm) Modified: 6/24/2026