— npm MAL-2026-4250 · GHSA-jq6x-r6vm-vwrx Malicious code in wallet-backup-verifier (npm) Modified: 5/26/2026