— npm MAL-2026-4541 · GHSA-hr6r-2xx8-mrh9 Malicious code in crypto-hash-sdk (npm) Modified: 6/10/2026