— npm MAL-2026-3039 · GHSA-388h-jcvw-5634 Malicious code in process-app-task (npm) Modified: 5/25/2026