CVE-2026-5556: Code Injection in pi-mono Node.js Package | NextGuard