— npm MAL-2026-4303 · GHSA-jfp3-8vwj-7g9v Malicious code in auth0-common-telemetry (npm) Modified: 5/25/2026