— npm MAL-2026-6315 · GHSA-94cr-ccj8-78g6 Malicious code in ts-arithmetic-helper (npm) Modified: 6/23/2026