— npm MAL-2026-4308 · GHSA-c4gp-gx6v-65jq Malicious code in core-utility-tools (npm) 수정: 2026. 5. 25.