— npm MAL-2026-5062 · GHSA-frcf-f9wx-gq64 Malicious code in codex-devcontainer-install (npm) 수정: 2026. 5. 29.