— npm MAL-2026-4283 · GHSA-6fxh-5965-3xf4 Malicious code in token-usage-tracker (npm) 수정: 2026. 5. 25.