— npm MAL-2026-5072 · GHSA-f4xf-cwx5-r3jm Malicious code in hardhat-evmchain (npm) Modified: 5/29/2026