— npm MAL-2026-5847 · GHSA-mf62-v96j-mg7g Malicious code in reading-cookies (npm) Modified: 6/16/2026