— npm MAL-2026-4335 · GHSA-2qjx-pgq9-vx24 Malicious code in webservices.rest (npm) Modified: 5/25/2026