— npm MAL-2026-5452 · GHSA-f435-6j4p-6q42 Malicious code in shopify-app-bridge-internal (npm) Modified: 6/16/2026