Supply Chain Incidents

MAL-2026-11188

Malicious code in open-worker-cli (npm)

MAL-2026-11184

Malicious code in feedback-ai-sdk (npm)

MAL-2026-11191

Malicious code in zer0code (npm)

MAL-2026-11170

Malicious code in @finxsecdemo/utils (npm)

MAL-2026-11192

Malicious code in test2221 (npm)

MAL-2026-11181

Malicious code in chain-manager (npm)

MAL-2026-11176

Malicious code in @bowozzz/baileys (npm)

MAL-2026-11157

Malicious code in @mypwn/hawkeye (npm)

MAL-2026-11499

Malicious code in @types-beta/sdk (npm)

MAL-2026-11161

Malicious code in @joyfill/layouts (npm)

MAL-2026-11160

Malicious code in @joyfill/components (npm)

MAL-2026-11168

Malicious code in postcss-motion-utils (npm)

MAL-2026-11164

Malicious code in aone-sandbox (npm)

MAL-2026-11166

Malicious code in lib-mtop (npm)

MAL-2026-11163

Malicious code in aone-kit-cli (npm)

MAL-2026-11162

Malicious code in aone-kit (npm)

MAL-2026-11167

Malicious code in local-config-parser (npm)

MAL-2026-11165

Malicious code in cloud-config-fetcher (npm)

MAL-2026-11169

Malicious code in smart-config-manager (npm)

MAL-2026-11147

Malicious code in simple-probe-utils (npm)

MAL-2026-11140

Malicious code in korvica (npm)

MAL-2026-11148

Malicious code in streak-core-lib (npm)

MAL-2026-11134

Malicious code in color-convert-helper (npm)

MAL-2026-11138

Malicious code in json-schema-inspector (npm)