— npm MAL-2026-6333 · GHSA-jwg8-mccp-c3vg Malicious code in mjs-eslint-service (npm) Modified: 6/23/2026