— npm MAL-2026-3128 · GHSA-qgp5-pp55-46vj Malicious code in wm-plugin-teach-me-widget (npm) Modified: 5/25/2026