Supply Chain Incidents

MAL-2026-11251

Malicious code in broccoli-watcher-siphon (npm)

MAL-2026-11332

Malicious code in model-data-cache-service (npm)

MAL-2026-11315

Malicious code in gatorhelper (npm)

MAL-2026-11250

Malicious code in bn.js-5 (npm)

MAL-2026-11359

Malicious code in pullingpackageeeeeeeeee (npm)

MAL-2026-11360

Malicious code in pullingpackageeeeeeeeeee (npm)

MAL-2026-11356

Malicious code in pullingpackageeeeeee (npm)

MAL-2026-11358

Malicious code in pullingpackageeeeeeeee (npm)

MAL-2026-11354

Malicious code in pullingpackageee (npm)

MAL-2026-11357

Malicious code in pullingpackageeeeeeee (npm)

MAL-2026-11355

Malicious code in pullingpackageeee (npm)

MAL-2026-11353

Malicious code in pullingpackagee (npm)

MAL-2026-11352

Malicious code in pullingpackaged (npm)

MAL-2026-11351

Malicious code in pullingpackage (npm)

MAL-2026-11209

Malicious code in @dotconf-pro/dotenv (npm)

MAL-2026-11208

Malicious code in @dotconf-pro/dotconf-pro (npm)

MAL-2026-11375

Malicious code in rumjs (npm)

MAL-2026-11207

Malicious code in @404c3s4r/testxxx (npm)

MAL-2026-11388

Malicious code in streak-metrics-math (npm)

MAL-2026-11390

Malicious code in svelte-metric-map (npm)

MAL-2026-11391

Malicious code in svelte-streak-metric (npm)

MAL-2026-11387

Malicious code in streak-metrics-core (npm)

MAL-2026-11400

Malicious code in thedata (npm)

MAL-2026-11269

Malicious code in consumerweb-risk (npm)