— npm MAL-2026-4220 · GHSA-qc99-w9r4-jrg5 Malicious code in web3-secrets-detector (npm) Modified: 5/26/2026