— npm MAL-2026-4333 · GHSA-7v58-43rg-wjwq Malicious code in vite-plugin-env-compat-1.5 (npm) 수정: 2026. 5. 25.