— npm MAL-2026-5509 · GHSA-6qhx-9853-hxm6 Malicious code in npmjs_truffle-helper (npm) Modified: 6/10/2026