— npm MAL-2026-5085 · GHSA-m273-jgjp-6f68 Malicious code in web3-config-loader (npm) 수정: 2026. 5. 29.