Supply Chain Incidents

MAL-2026-14043

Malicious code in @divineubg/divine (npm)

MAL-2026-14042

Malicious code in @devmikets/hyperliquid-sdk (npm)

MAL-2026-14041

Malicious code in @demopack/www (npm)

MAL-2026-14039

Malicious code in @cdnshell/loader (npm)

MAL-2026-14040

Malicious code in @workoscalifant/sudoku-term (npm)

MAL-2026-14029

Malicious code in axios-fast (npm)

MAL-2026-14021

Malicious code in alelo-auth (npm)

MAL-2026-14020

Malicious code in alelo-api (npm)

MAL-2026-14026

Malicious code in alelo-sdk (npm)

MAL-2026-14031

Malicious code in datefmt-core-utils (npm)

MAL-2026-14032

Malicious code in datefmt-simple-utils (npm)

MAL-2026-14028

Malicious code in alelo-utils (npm)

MAL-2026-14037

Malicious code in tailwind-plugin-kit (npm)

MAL-2026-14025

Malicious code in alelo-payment (npm)

MAL-2026-14023

Malicious code in alelo-common (npm)

MAL-2026-14033

Malicious code in meualelo (npm)

MAL-2026-14038

Malicious code in tailwind-toolkit (npm)

MAL-2026-14030

Malicious code in bootstrap-custom-ui (npm)

MAL-2026-14024

Malicious code in alelo-core (npm)

MAL-2026-14027

Malicious code in alelo-services (npm)

MAL-2026-14036

Malicious code in notafollower1226 (npm)

MAL-2026-14022

Malicious code in alelo-client (npm)

MAL-2026-14035

Malicious code in notafollower122 (npm)

MAL-2026-14034

Malicious code in notafollower1 (npm)