— npm MAL-2026-4281 · GHSA-95m4-gh9m-px5h Malicious code in project-init-tools (npm) Modified: 5/25/2026