Supply Chain Incidents

MAL-2026-14168

Malicious code in chalk-util (npm)

MAL-2026-14182

Malicious code in lodash-lib (npm)

MAL-2026-14165

Malicious code in chalk-core (npm)

MAL-2026-14188

Malicious code in sui-move-gql (npm)

MAL-2026-14166

Malicious code in chalk-es (npm)

MAL-2026-14173

Malicious code in commandor-core (npm)

MAL-2026-14159

Malicious code in @evial/runtime-health (npm)

MAL-2026-14172

Malicious code in commandor-cli (npm)

MAL-2026-14171

Malicious code in comander-lib (npm)

MAL-2026-14176

Malicious code in dev-env-check (npm)

MAL-2026-14163

Malicious code in axois-http (npm)

MAL-2026-14179

Malicious code in loadashjs (npm)

MAL-2026-14178

Malicious code in ladash-cli (npm)

MAL-2026-14174

Malicious code in commandorjs (npm)

MAL-2026-14164

Malicious code in bqq1 (npm)

MAL-2026-14186

Malicious code in pump-segments-sdk (npm)

MAL-2026-14170

Malicious code in comander-cli (npm)

MAL-2026-14162

Malicious code in axious-core (npm)

MAL-2026-14181

Malicious code in lodahsjs (npm)

MAL-2026-14185

Malicious code in mutex-thread (npm)

MAL-2026-14160

Malicious code in @library-dev-team/data-sanitizer (npm)

MAL-2026-14177

Malicious code in fast-glob-fast (npm)

MAL-2026-14142

Malicious code in testingsmthb1g (npm)

MAL-2026-14141

Malicious code in test-npm-snurkeburk-hackerone (npm)