Supply Chain Incidents

MAL-2026-14248

Malicious code in nice-utils-helper (npm)

MAL-2026-14243

Malicious code in flydev (npm)

MAL-2026-14241

Malicious code in dxrs-dos (npm)

MAL-2026-14240

Malicious code in dxr-dos (npm)

MAL-2026-14242

Malicious code in electro-session (npm)

MAL-2026-14247

Malicious code in magika-js (npm)

MAL-2026-14246

Malicious code in hardhat-hold (npm)

MAL-2026-14245

Malicious code in github-policy-bot (npm)

MAL-2026-14244

Malicious code in gemini-cli-a2a-server (npm)

MAL-2026-14239

Malicious code in gaarf-node-bq (npm)

MAL-2026-14238

Malicious code in gaarf-node (npm)

MAL-2026-14237

Malicious code in gaarf-bq (npm)

MAL-2026-14236

Malicious code in gaarf (npm)

MAL-2026-14235

Malicious code in config-helper-kit (npm)

MAL-2026-14234

Malicious code in commandor-lib (npm)

MAL-2026-14233

Malicious code in code-assist-mcp (npm)

MAL-2026-14232

Malicious code in chromeos-webdriver-cli (npm)

MAL-2026-14231

Malicious code in chromecast-webdriver-cli (npm)

MAL-2026-14230

Malicious code in chrome-enterprise-premium-mcp (npm)

MAL-2026-14229

Malicious code in carbon-monorepo (npm)

MAL-2026-14228

Malicious code in broadcast-graphics-mcp (npm)

MAL-2026-14227

Malicious code in bazelisk (npm)

MAL-2026-14226

Malicious code in animate-css-vite (npm)

MAL-2026-14225

Malicious code in ambera (npm)