— npm MAL-2026-4325 · GHSA-qgfv-9wmq-m4f7 Malicious code in ts-config-mapper (npm) Modified: 5/25/2026