— npm MAL-2026-4523 · GHSA-6v88-cxrw-54h7 Malicious code in claude-channel-imessage (npm) Modified: 5/27/2026