MAL-2026-10159

npm-rce-safe-proof-yourname in npm. Metadata and links only; package code and payload are never mirrored.

Loading the full malicious-package record on demand…