— npm MAL-2026-3768 · GHSA-qjvc-v9v6-xh96 Malicious code in npmjs_web3-util (npm) Modified: 6/10/2026