— npm MAL-2026-4309 · GHSA-xjvq-4jq6-f8vq Malicious code in eh-bridge-utils (npm) Modified: 5/25/2026