— npm MAL-2026-4334 · GHSA-2rh6-x7fc-2fr4 Malicious code in vite-plugin-env-compat-plus (npm) Modified: 5/25/2026