— npm MAL-2026-5085 · GHSA-m273-jgjp-6f68 Malicious code in web3-config-loader (npm) Modified: 5/29/2026