— npm MAL-2026-5843 · GHSA-897c-qgxj-rv65 Malicious code in chai-smart-assert (npm) Modified: 6/16/2026