MAL-2026-18516 Malicious code in @goparrot-dashboard-api/users (npm)

@goparrot-dashboard-api/users is a dependency-confusion probe: it takes a name in a @goparrot-dashboard-api scope that its publisher created on npm, next to GoParrot's public @goparrot scope, so a build that resolves that scope from npm gets it instead of a private package of the same name. Versi...