Supply Chain Incidents

MAL-2026-11321

Malicious code in inkalabs (npm)

MAL-2026-11374

Malicious code in rshell (npm)

MAL-2026-11318

Malicious code in ideascloud (npm)

MAL-2026-11292

Malicious code in equiviewer (npm)

MAL-2026-11304

Malicious code in express-sequelize-wrapper (npm)

MAL-2026-11237

Malicious code in api-gateway-lambda-router (npm)

MAL-2026-11379

Malicious code in shsk (npm)

MAL-2026-11346

Malicious code in payu-node (npm)

MAL-2026-11236

Malicious code in android-web-logger (npm)

MAL-2026-11331

Malicious code in merg-descripters (npm)

MAL-2026-11305

Malicious code in express-test-dependency (npm)

MAL-2026-11212

Malicious code in @goodjavascript/dotenv (npm)

MAL-2026-11280

Malicious code in discord-starter (npm)

MAL-2026-11278

Malicious code in discord-ms (npm)

MAL-2026-11235

Malicious code in ag-grid-boost (npm)

MAL-2026-11327

Malicious code in lodash-ex (npm)

MAL-2026-11320

Malicious code in imut-set (npm)

MAL-2026-11365

Malicious code in react-ag-grid (npm)

MAL-2026-11409

Malicious code in wastu (npm)

MAL-2026-11396

Malicious code in test-wastu (npm)

MAL-2026-11377

Malicious code in scol (npm)

MAL-2026-11248

Malicious code in blbird (npm)

MAL-2026-11287

Malicious code in ecto-logger (npm)

MAL-2026-11384

Malicious code in spectral-corsair (npm)