— npm MAL-2026-4282 · GHSA-5frg-fmcq-p9cg Malicious code in prompt-engineering-toolkit (npm) Modified: 5/25/2026