— npm MAL-2026-4606 · GHSA-64jc-f3r5-gp74 Malicious code in martinez-polygon-clipping-tony (npm) Modified: 6/10/2026