— npm MAL-2026-5699 · GHSA-j8qr-4p5h-mwqj Malicious code in chai-web3-testkit (npm) Modified: 6/15/2026