— npm MAL-2026-4254 · GHSA-ppjp-2h29-66pv Malicious code in reactive-cdk-app (npm) Modified: 5/29/2026