— npm MAL-2026-5613 · GHSA-qcg5-4gpc-33h2 Malicious code in internallib_v346 (npm) Modified: 6/17/2026