— npm MAL-2026-4284 · GHSA-p8hf-5qq9-8g8h Malicious code in workspace-config-loader (npm) 수정: 2026. 5. 25.