Supply Chain Incidents

MAL-2026-6435

Malicious code in serverless-leo (npm)

leo-connector-elasticsearch

MAL-2026-6423

Malicious code in leo-connector-elasticsearch (npm)

serverless-convention

MAL-2026-6434

Malicious code in serverless-convention (npm)

solo-nav

MAL-2026-6436

Malicious code in solo-nav (npm)

leo-connector-oracle

MAL-2026-6426

Malicious code in leo-connector-oracle (npm)

leo-sdk

MAL-2026-6430

Malicious code in leo-sdk (npm)

leo-cli

MAL-2026-6421

Malicious code in leo-cli (npm)

leo-config

MAL-2026-6422

Malicious code in leo-config (npm)

leo-cdk-lib

MAL-2026-6420

Malicious code in leo-cdk-lib (npm)

syco1

MAL-2026-6404

Malicious code in syco1 (npm)

syspo

MAL-2026-6406

Malicious code in syspo (npm)

sypoi1

MAL-2026-6405

Malicious code in sypoi1 (npm)

@kl-dolphin/jump

MAL-2026-6403

Malicious code in @kl-dolphin/jump (npm)

@kl-dolphin/swim

MAL-2026-6402

Malicious code in @kl-dolphin/swim (npm)

zenith-utils

MAL-2026-6401

Malicious code in zenith-utils (npm)

normalize-plus

MAL-2026-6399

Malicious code in normalize-plus (npm)

ui-core-system

MAL-2026-6398

Malicious code in ui-core-system (npm)

ldapaotest

MAL-2026-6397

Malicious code in ldapaotest (npm)

cccmyssr2

MAL-2026-6391

Malicious code in cccmyssr2 (npm)

cccmyssr-util

MAL-2026-6390

Malicious code in cccmyssr-util (npm)

cccmyssr3

MAL-2026-6392

Malicious code in cccmyssr3 (npm)

react-campaign-optimizer

MAL-2026-6395

Malicious code in react-campaign-optimizer (npm)

signup-embedder

MAL-2026-6396

Malicious code in signup-embedder (npm)

Dep Confusion

chai-as-predicted

MAL-2026-6393

Malicious code in chai-as-predicted (npm)

Typosquat