Supply Chain Incidents

MAL-2026-14016

Malicious code in preinstall-hook-webhook-callback-demo (npm)

MAL-2026-13990

Malicious code in wct-st (npm)

MAL-2026-13991

Malicious code in webautomation_js (npm)

MAL-2026-13989

Malicious code in @secauditb20y/sec-test-r3b (npm)

MAL-2026-14009

Malicious code in root-locator (npm)

MAL-2026-14013

Malicious code in source-analyzer (npm)

MAL-2026-14005

Malicious code in path-match-js (npm)

MAL-2026-14007

Malicious code in react-shield (npm)

MAL-2026-13972

Malicious code in @jacksher/install-exec-poc (npm)

MAL-2026-13985

Malicious code in node-config-svg-contract (npm)

MAL-2026-13986

Malicious code in notafollower (npm)

MAL-2026-13978

Malicious code in datefmt-util-helper (npm)

MAL-2026-13973

Malicious code in @khaznatech/common (npm)

MAL-2026-13975

Malicious code in @khaznatech/utils (npm)

MAL-2026-13974

Malicious code in @khaznatech/core (npm)

MAL-2026-13976

Malicious code in check-audit (npm)

MAL-2026-13982

Malicious code in in-install (npm)

MAL-2026-13977

Malicious code in cspell-esm (npm)

MAL-2026-13984

Malicious code in napi-raw (npm)

MAL-2026-13979

Malicious code in eslint-generate-prerelease (npm)

MAL-2026-13983

Malicious code in knip-bun (npm)

MAL-2026-13980

Malicious code in eslint-generate-release (npm)

MAL-2026-13981

Malicious code in eslint-publish-release (npm)

MAL-2026-13987

Malicious code in resolve-audit (npm)