— npm MAL-2026-4311 · GHSA-hgw4-f8mg-vgwf Malicious code in explorhub-claude-bridge (npm) Modified: 5/25/2026