Supply Chain Incidents

MAL-2026-14410

Malicious code in @temptation.js/utils (npm)

dext-crate-video

MAL-2026-14408

Malicious code in dext-crate-video (npm)

dext-crate-check

MAL-2026-14406

Malicious code in dext-crate-check (npm)

dext-crate-image

MAL-2026-14407

Malicious code in dext-crate-image (npm)

create-json-client

MAL-2026-14405

Malicious code in create-json-client (npm)

polis-diraja

MAL-2026-14409

Malicious code in polis-diraja (npm)

@blurrydespair/libsignal-node

MAL-2026-14404

Malicious code in @blurrydespair/libsignal-node (npm)

react-emits

MAL-2026-14403

Malicious code in react-emits (npm)

agentgui

MAL-2026-14402

Malicious code in agentgui (npm)

message-compiler

MAL-2026-14392

Malicious code in message-compiler (npm)

Typosquat

sm-admin

MAL-2026-14393

Malicious code in sm-admin (npm)

sm-apikey-model

MAL-2026-14394

Malicious code in sm-apikey-model (npm)

sm-oauth

MAL-2026-14398

Malicious code in sm-oauth (npm)

sm-cart

MAL-2026-14396

Malicious code in sm-cart (npm)

Dep Confusion

sm-checkout

MAL-2026-14397

Malicious code in sm-checkout (npm)

sm-billing-form

MAL-2026-14395

Malicious code in sm-billing-form (npm)

Typosquat

sm-session

MAL-2026-14400

Malicious code in sm-session (npm)

amundi-compare

MAL-2026-14390

Malicious code in amundi-compare (npm)

fund-calculator

MAL-2026-14391

Malicious code in fund-calculator (npm)

sm-payment

MAL-2026-14399

Malicious code in sm-payment (npm)

@opap/player-kyc-widget

MAL-2026-14387

Malicious code in @opap/player-kyc-widget (npm)

hydration-dim-kit

MAL-2026-14385

Malicious code in hydration-dim-kit (npm)

svelte-dim-kit

MAL-2026-14386

Malicious code in svelte-dim-kit (npm)

@sdgdfgdfhhhfd/multiviewr

MAL-2026-14383

Malicious code in @sdgdfgdfhhhfd/multiviewr (npm)