—npmMAL-2026-13449· GHSA-5vjj-p6vh-456mMalicious code in merchantweb-lang-cookie-reset (npm)Modified: 9/24/2026