— npm MAL-2026-4330 · GHSA-jp5r-76w9-2rvh Malicious code in ts-stream-compose (npm) Modified: 5/25/2026