— npm MAL-2026-3037 · GHSA-9whf-2j26-8mhh Malicious code in standalone-apps (npm) Modified: 5/25/2026