Supply Chain Incidents

MAL-2026-6491

Malicious code in hexo-deployer-wrangler (npm)

MAL-2026-6484

Malicious code in random-string-64 (npm)

MAL-2026-6482

Malicious code in kelly-stake (npm)

MAL-2026-6480

Malicious code in gx-npm-lib (npm)

MAL-2026-6481

Malicious code in gx-npm-ui (npm)

MAL-2026-6487

Malicious code in velocityfix (npm)

MAL-2026-6483

Malicious code in log-update-ts (npm)

MAL-2026-6479

Malicious code in @salem_jalal/osc-components (npm)

MAL-2026-6486

Malicious code in unsafe-malicious-package (npm)

MAL-2026-6485

Malicious code in starship-timeline (npm)

MAL-2026-6477

Malicious code in runtimekit (npm)

MAL-2026-6474

Malicious code in ref-slot (npm)

MAL-2026-6476

Malicious code in typedecode (npm)

MAL-2026-6475

Malicious code in textshape-css (npm)

MAL-2026-6473

Malicious code in colorpicker-ui (npm)

MAL-2026-6471

Malicious code in tailwind-color-shades (npm)

MAL-2026-6472

Malicious code in tailwindcss-effector (npm)

MAL-2026-6470

Malicious code in chlklib (npm)

MAL-2026-6469

Malicious code in ts-precision (npm)

MAL-2026-6468

Malicious code in ts-opus (npm)

MAL-2026-6467

Malicious code in @vpms/design-system (npm)

MAL-2026-6465

Malicious code in chai-as-built (npm)

MAL-2026-6466

Malicious code in gx-npm-feature-flags (npm)

MAL-2026-6464

Malicious code in @colibri-event-types/megamarket-ru-web (npm)