— npm MAL-2026-5697 · GHSA-69cw-2vc8-9jm7 Malicious code in web-model-bridge (npm) Modified: 6/16/2026