Supply Chain Incidents

MAL-2026-14361

Malicious code in stillm4ddpocs-demo-gadget (npm)

MAL-2026-14360

Malicious code in stillm4ddpocs-demo-widget (npm)

MAL-2026-14359

Malicious code in internallib_v902 (npm)

MAL-2026-14357

Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)

MAL-2026-14356

Malicious code in lumen-pages-community (npm)

MAL-2026-14355

Malicious code in fuel-react (npm)

MAL-2026-14354

Malicious code in kelly-sizing (npm)

MAL-2026-14353

Malicious code in @gfe/lx-watcher (npm)

MAL-2026-14352

Malicious code in tailwind-animate-css-plugin (npm)

MAL-2026-14346

Malicious code in @next-fonts/font (npm)

MAL-2026-14347

Malicious code in mcq-session (npm)

MAL-2026-14348

Malicious code in moidevy (npm)

MAL-2026-14345

Malicious code in express-session-handler (npm)

MAL-2026-14344

Malicious code in @js-lib-team/env-parser (npm)

MAL-2026-14343

Malicious code in chai-as-soul (npm)

MAL-2026-14342

Malicious code in coin-fees (npm)

MAL-2026-14331

Malicious code in exam-kit (npm)

MAL-2026-14329

Malicious code in @pablo_clueless/printr (npm)

MAL-2026-14330

Malicious code in @pablo_clueless/sniffr (npm)

MAL-2026-14328

Malicious code in goldstar-api-server (npm)

MAL-2026-14327

Malicious code in ethereum-validator (npm)

MAL-2026-14325

Malicious code in create-react-app-ui (npm)

MAL-2026-14324

Malicious code in create-react-app-text (npm)

MAL-2026-14326

Malicious code in create-react-app-ux (npm)