MAL-2026-13532

ded-pwa-bnpl-forms-test-demo in npm. Metadata and links only; package code and payload are never mirrored.

Loading the full malicious-package record on demand…