— npm MAL-2026-6094 · GHSA-wrx9-4534-jwh6 Malicious code in metrics-probe-f256 (npm) Modified: 6/18/2026