— npm MAL-2026-4333 · GHSA-7v58-43rg-wjwq Malicious code in vite-plugin-env-compat-1.5 (npm) Modified: 5/25/2026