— npm MAL-2026-4672 · GHSA-j3fh-3pm4-rw5h Malicious code in solidity-coverage-plus (npm) Modified: 5/26/2026