Supply Chain Incidents

MAL-2026-11399

Malicious code in tgnode (npm)

MAL-2026-11341

Malicious code in node-logger-winston (npm)

MAL-2026-11274

Malicious code in dash-merge (npm)

MAL-2026-11213

Malicious code in @grua/core (npm)

MAL-2026-11214

Malicious code in @grua/icons (npm)

MAL-2026-11323

Malicious code in isix (npm)

MAL-2026-11227

Malicious code in @solana-sdk/web3.js (npm)

MAL-2026-11211

Malicious code in @ethers-sdk/wallet (npm)

MAL-2026-11210

Malicious code in @ethers-sdk/ethers (npm)

MAL-2026-11282

Malicious code in dotex-plugin (npm)

MAL-2026-11281

Malicious code in dotenv-core (npm)

MAL-2026-11267

Malicious code in compose-logger-stand (npm)

MAL-2026-11319

Malicious code in impv (npm)

MAL-2026-11291

Malicious code in ember-livereload-indicator (npm)

MAL-2026-11310

Malicious code in fcogvspgigatanzcydfyvgtjhvxibyau (npm)

MAL-2026-11251

Malicious code in broccoli-watcher-siphon (npm)

MAL-2026-11406

Malicious code in unified-help-center-alpha (npm)

MAL-2026-11252

Malicious code in build-time-metrics (npm)

MAL-2026-11380

Malicious code in slowest-build-nodes (npm)

MAL-2026-11266

Malicious code in columns_changed (npm)

MAL-2026-11347

Malicious code in pjm-dls (npm)

MAL-2026-11276

Malicious code in decline (npm)

MAL-2026-11268

Malicious code in confetti-rebuilds (npm)

MAL-2026-11332

Malicious code in model-data-cache-service (npm)