Supply Chain Incidents

MAL-2026-13735

Malicious code in @aerodrome-finance/slipstream (npm)

MAL-2026-13766

Malicious code in node-internal-svg-loader (npm)

MAL-2026-13762

Malicious code in developer-dashboard (npm)

MAL-2026-13733

Malicious code in newtun (npm)

MAL-2026-13763

Malicious code in fetch-runtime (npm)

MAL-2026-13765

Malicious code in lines-columns (npm)

MAL-2026-13774

Malicious code in augustdigital-sdk (npm)

MAL-2026-13776

Malicious code in upshift-config (npm)

MAL-2026-13775

Malicious code in permit2 (npm)

MAL-2026-13777

Malicious code in upshift-finance (npm)

MAL-2026-13771

Malicious code in boring-vault (npm)

MAL-2026-13770

Malicious code in @telekom-ods/react-ui-kit (npm)

MAL-2026-13772

Malicious code in camelot-ammv2-core (npm)

MAL-2026-13773

Malicious code in camelot-ammv2-periphery (npm)

MAL-2026-13931

Malicious code in @dreamguyxeon/libsignal-node (npm)

MAL-2026-13929

Malicious code in @dgxeon13/libsignal-node (npm)

MAL-2026-13932

Malicious code in my-auto-follow (npm)

MAL-2026-13930

Malicious code in @dreamguyxeon/baileyx (npm)

MAL-2026-13714

Malicious code in @sqlite-labs/nodesql (npm)

MAL-2026-13713

Malicious code in @sqlite-labs/createsql (npm)

MAL-2026-13725

Malicious code in spoint (npm)

MAL-2026-13726

Malicious code in svelte-kit-streak (npm)

MAL-2026-13724

Malicious code in kit-map-streak (npm)

MAL-2026-13723

Malicious code in godot-kit (npm)