— npm MAL-2026-4312 · GHSA-2qjx-pmc9-2jrj Malicious code in explorhub-mcp-server (npm) Modified: 5/25/2026