— npm MAL-2026-4338 · GHSA-9gg4-xfch-pg34 Malicious code in wm-plugin-json-conditions (npm) Modified: 5/25/2026