— npm MAL-2026-4249 · GHSA-q8c8-9p2m-f4v7 Malicious code in truffle-config-helper (npm) Modified: 5/26/2026