EUVD-2026-3402

esm.sh has a path traversal in extractPackageTarball enables file writes from malicious packages...