Supply Chain Incidents

MAL-2026-10787

Malicious code in @gocortexio/npmgremlinbox-agpl-3-0-only (npm)

MAL-2026-10792

Malicious code in @gocortexio/npmgremlinbox-base (npm)

MAL-2026-10793

Malicious code in @gocortexio/npmgremlinbox-busl-1-1 (npm)

MAL-2026-10789

Malicious code in @gocortexio/npmgremlinbox-apsl (npm)

MAL-2026-10795

Malicious code in @gocortexio/npmgremlinbox-cal-1-0-combined-work-exception (npm)

MAL-2026-10784

Malicious code in @gocortexio/npmgremlinbox-agpl-1-0-only (npm)

MAL-2026-10783

Malicious code in @gocortexio/npmgremlinbox-agpl-1-0 (npm)

MAL-2026-10785

Malicious code in @gocortexio/npmgremlinbox-agpl-1-0-or-later (npm)

MAL-2026-10786

Malicious code in @gocortexio/npmgremlinbox-agpl-3-0 (npm)

MAL-2026-10951

Malicious code in @markscan/api (npm)

MAL-2026-11044

Malicious code in tailwind-gutenberg-block-zero (npm)

MAL-2026-10933

Malicious code in twilio-deploy (npm)

MAL-2026-10964

Malicious code in markscan-utils (npm)

MAL-2026-10959

Malicious code in iphouse-core (npm)

MAL-2026-10950

Malicious code in @iphouse/core (npm)

MAL-2026-10944

Malicious code in zer0onetencent (npm)

MAL-2026-10952

Malicious code in @markscan/core (npm)

MAL-2026-11043

Malicious code in supplyhub (npm)

MAL-2026-10948

Malicious code in @akrai/report_new (npm)

MAL-2026-10961

Malicious code in markscan-api (npm)

MAL-2026-10958

Malicious code in iphouse-api (npm)

MAL-2026-10937

Malicious code in twilio-serverless (npm)

MAL-2026-10945

Malicious code in zer0onetencent2 (npm)

MAL-2026-10938

Malicious code in twiliointernal-messaging-toolbox (npm)