— npm MAL-2026-4301 · GHSA-cwjp-2mq2-6xp6 Malicious code in auth0-android-helper-utils (npm) Modified: 5/25/2026