— npm MAL-2026-4665 · GHSA-rv4w-rvp6-p6rg Malicious code in security-env-loader (npm) Modified: 6/10/2026