TuxCare rebuilt tar to address 2 CVEs. Fixed in 6.0.2-tuxcare.2.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1775176096.json"