Supply Chain Incidents

MAL-2026-14296

Malicious code in gfff5 (npm)

MAL-2026-14297

Malicious code in homekit-mcp (npm)

MAL-2026-14290

Malicious code in anhn-cli (npm)

MAL-2026-14288

Malicious code in @wizloft/harness-plugin-repository-files (npm)

MAL-2026-14287

Malicious code in @wizloft/harness-kernel (npm)

MAL-2026-14289

Malicious code in @wizloft/harness-validation (npm)

MAL-2026-14285

Malicious code in @wizloft/harness (npm)

MAL-2026-14286

Malicious code in @wizloft/harness-context (npm)

MAL-2026-14292

Malicious code in log-res (npm)

MAL-2026-14294

Malicious code in mc-registry (npm)

MAL-2026-14291

Malicious code in libas-signal (npm)

MAL-2026-14293

Malicious code in matrixflow-js (npm)

MAL-2026-14295

Malicious code in mcp-dev-toolkit (npm)

MAL-2026-14278

Malicious code in layer2-sdk (npm)

MAL-2026-14283

Malicious code in neverthrow-core (npm)

MAL-2026-14279

Malicious code in localize-translate (npm)

MAL-2026-14282

Malicious code in mutex-plus (npm)

MAL-2026-14281

Malicious code in mutex-lite (npm)

MAL-2026-14280

Malicious code in mutex-core (npm)

MAL-2026-14284

Malicious code in nibra1 (npm)

MAL-2026-14276

Malicious code in node_cryptography (npm)

MAL-2026-14275

Malicious code in minequest (npm)

MAL-2026-14277

Malicious code in o0o9 (npm)

MAL-2026-14270

Malicious code in nodealpha (npm)