— npm MAL-2026-4670 · GHSA-wxv4-4mmm-mmm9 Malicious code in skills-detector (npm) Modified: 5/27/2026