Supply Chain Incidents

MAL-2026-11132

Malicious code in bianira-ui (npm)

MAL-2026-11149

Malicious code in streak-core-math (npm)

MAL-2026-11122

Malicious code in @crbrc/xbt (npm)

MAL-2026-11139

Malicious code in kordyn (npm)

MAL-2026-11145

Malicious code in rollup-runtime-core-polyfills (npm)

MAL-2026-11144

Malicious code in react-puller (npm)

MAL-2026-11158

Malicious code in blots (npm)

MAL-2026-11130

Malicious code in array-node-utils (npm)

MAL-2026-11151

Malicious code in text-line-parser (npm)

MAL-2026-11146

Malicious code in sigchain-js (npm)

MAL-2026-11121

Malicious code in @apexfnd/apex (npm)

MAL-2026-11142

Malicious code in node-array-plus (npm)

MAL-2026-11150

Malicious code in streak-daily-lib (npm)

MAL-2026-11143

Malicious code in parallely (npm)

MAL-2026-11135

Malicious code in ethers-secure (npm)

MAL-2026-11152

Malicious code in tidal-embed-player (npm)

MAL-2026-11131

Malicious code in basic-vite (npm)

MAL-2026-11153

Malicious code in triage_bot_using_sdkv3 (npm)

MAL-2026-11137

Malicious code in jobber-app-template-react (npm)

MAL-2026-11123

Malicious code in @yancyyu/agentcli (npm)

MAL-2026-11155

Malicious code in xerohub-discord-voice-v3 (npm)

MAL-2026-11154

Malicious code in xerohub-discord-voice-v2 (npm)

MAL-2026-11141

Malicious code in lib-streak-math (npm)

MAL-2026-11120

Malicious code in @ai_/autoprefixers (npm)