— npm MAL-2026-5492 · GHSA-jxcv-3994-r8xf Malicious code in xnder-wrapper-module (npm) Modified: 6/10/2026