Supply Chain Incidents

MAL-2026-17812

Malicious code in @ikanngeming/npm (npm)

MAL-2026-17817

Malicious code in nakkinpm (npm)

MAL-2026-17811

Malicious code in @ikanngeming/blubub (npm)

MAL-2026-17810

Malicious code in @zaka13/zakasite (npm)

MAL-2026-17808

Malicious code in @s4yhiitestpoc/r2-https-b (npm)

MAL-2026-17806

Malicious code in ap3-foundations-ui (npm)

MAL-2026-17803

Malicious code in hridoy-ultimate (npm)

MAL-2026-17763

Malicious code in @coopeuch/core (npm)

MAL-2026-17761

Malicious code in @coopeuch/components (npm)

MAL-2026-17766

Malicious code in @s4yhiitestpoc/scan-https-d (npm)

MAL-2026-17760

Malicious code in @coopeuch/common (npm)

MAL-2026-17764

Malicious code in @s4yhiitestpoc/r2-https (npm)

MAL-2026-17765

Malicious code in @s4yhiitestpoc/r3-https (npm)

MAL-2026-17777

Malicious code in react-paginate-v5 (npm)

MAL-2026-17772

Malicious code in liferay-workspace-scripts (npm)

MAL-2026-17770

Malicious code in ksp-app (npm)

MAL-2026-17771

Malicious code in ksp-client-registry (npm)

MAL-2026-17767

Malicious code in another-very-long-name (npm)

MAL-2026-17778

Malicious code in some-very-long-package-name (npm)

MAL-2026-17773

Malicious code in nested-lib (npm)

MAL-2026-17776

Malicious code in pay-methods-kmf (npm)

MAL-2026-17768

Malicious code in cloudflare_module (npm)

MAL-2026-17759

Malicious code in @coopeuch/button (npm)

MAL-2026-17769

Malicious code in deposit-limit-fe (npm)