— npm MAL-2026-5865 · GHSA-jhx4-8pjp-h27w Malicious code in npmjs-doc-builder (npm) Modified: 6/16/2026