— npm MAL-2026-6100 · GHSA-93cp-5ff7-p9m5 Malicious code in string-tools-be6c (npm) Modified: 6/18/2026