— npm MAL-2026-6115 · GHSA-jw25-p682-fhw6 Malicious code in npm-sandbox-research-a1b2 (npm) Modified: 6/18/2026