— npm MAL-2026-4322 · GHSA-82vw-6f3x-f942 Malicious code in nba-blocker-plugin (npm) Modified: 5/25/2026