malware

• CVE-2026-34841 - @usebruno/cli axios supply-chain RAT 2026-06-09
• GHSA-jpvj-wpmj-h7rv - @cap-js/openapi package compromise 2026-06-09
• CVE-2026-45321 - TanStack npm supply-chain compromise 2026-06-07
• CVE-2026-48027 - Nx Console extension compromise 2026-06-07