Supply Chain Incidents

MAL-2026-11537

Malicious code in discord-vibegrations-api-natives (npm)

MAL-2026-11543

Malicious code in simple-date-formatter-new-5 (npm)

MAL-2026-11542

Malicious code in osinthell (npm)

MAL-2026-11545

Malicious code in simple-date-formatter-util-15 (npm)

MAL-2026-11528

Malicious code in @ks-openclaw/kim (npm)

MAL-2026-11527

Malicious code in streak-metricsaz (npm)

MAL-2026-11522

Malicious code in beaver-ui-form (npm)

MAL-2026-11526

Malicious code in nagix-nodejs (npm)

MAL-2026-11525

Malicious code in nagix-node (npm)

MAL-2026-11523

Malicious code in cache-manager (npm)

MAL-2026-11524

Malicious code in keyv (npm)

MAL-2026-11563

Malicious code in @deliveroo/reevent (npm)

MAL-2026-11788

Malicious code in @qlik/dts-bundler (npm)

MAL-2026-11955

Malicious code in @umacloud/cli-linux-arm64 (npm)

MAL-2026-11958

Malicious code in @umacloud/cli-linux-x64 (npm)

MAL-2026-11960

Malicious code in @umacloud/knowledge (npm)

MAL-2026-11989

Malicious code in umadev (npm)

MAL-2026-11551

Malicious code in @adminide-stack/clock-tik-browser (npm)

MAL-2026-11956

Malicious code in @umacloud/cli-linux-musl-arm64 (npm)

MAL-2026-11957

Malicious code in @umacloud/cli-linux-musl-x64 (npm)

MAL-2026-11959

Malicious code in @umacloud/cli-win32-x64 (npm)

MAL-2026-11953

Malicious code in @umacloud/cli-darwin-arm64 (npm)

MAL-2026-11562

Malicious code in @deliveroo/determinator (npm)

MAL-2026-11791

Malicious code in @qlik/embed-svelte (npm)