MAL-2026-18283 — Malicious code in @greenlake/session (npm)

@greenlake/session is an npm dependency-confusion package whose functional behavior consists of sending installation- and runtime-environment data to an external HTTP endpoint.