Supply Chain Incidents

MAL-2026-11269

Malicious code in consumerweb-risk (npm)

MAL-2026-11270

Malicious code in create-backend-scaffold (npm)

MAL-2026-11349

Malicious code in pretty-log-cli (npm)

MAL-2026-11328

Malicious code in logform-core (npm)

MAL-2026-11196

Malicious code in @wbnr/design (npm)

MAL-2026-11366

Malicious code in react-fast-refresh-helper (npm)

MAL-2026-11193

Malicious code in litespeed-cache (npm)

MAL-2026-11194

Malicious code in n8n-nodes-trust-me-im-totally-safe (npm)

MAL-2026-11174

Malicious code in @ai-plus/de-agent (npm)

MAL-2026-11175

Malicious code in @ai-plus/de-agent-sdk (npm)

MAL-2026-11173

Malicious code in @ai-agent-node/nodesql (npm)

MAL-2026-11172

Malicious code in @ai-agent-node/createnode (npm)

MAL-2026-11171

Malicious code in @ai-agent-node/agent-node (npm)

MAL-2026-11179

Malicious code in @zannstore/baileys (npm)

MAL-2026-11177

Malicious code in @peptide-unit/js-unimode (npm)

MAL-2026-11178

Malicious code in @peptide-unit/peptide-modify (npm)

MAL-2026-11185

Malicious code in flight-compare-analyzer (npm)

MAL-2026-11186

Malicious code in lwp-web-client (npm)

MAL-2026-11189

Malicious code in test-skill-zip (npm)

MAL-2026-11183

Malicious code in def-open-client (npm)

MAL-2026-11187

Malicious code in lzd-unified-station-sdk (npm)

MAL-2026-11190

Malicious code in uniapi-bridge (npm)

MAL-2026-11182

Malicious code in colder-cli (npm)

MAL-2026-11180

Malicious code in aone-cloud-cli (npm)