Supply Chain Incidents

MAL-2026-6394

Malicious code in hs-locale-management (npm)

MAL-2026-6387

Malicious code in multer-express (npm)

MAL-2026-6388

Malicious code in rapidsearch (npm)

MAL-2026-6386

Malicious code in evmdotjs (npm)

MAL-2026-6385

Malicious code in eth_accounts (npm)

MAL-2026-6389

Malicious code in vercel-api-client (npm)

MAL-2026-6379

Malicious code in simplisafe-gatsby (npm)

MAL-2026-6378

Malicious code in macos-ci-utils (npm)

MAL-2026-6377

Malicious code in linux-ci-utils (npm)

MAL-2026-6380

Malicious code in system-core-utils (npm)

MAL-2026-6376

Malicious code in bn-lint (npm)

MAL-2026-6374

Malicious code in evil-pkg (npm)

MAL-2026-6375

Malicious code in gpt-chat-cli (npm)

MAL-2026-6369

Malicious code in hardhat-test-log (npm)

MAL-2026-6367

Malicious code in dbt-language-server (npm)

MAL-2026-6370

Malicious code in hyperpure (npm)

MAL-2026-6368

Malicious code in decimal-format-utils (npm)

MAL-2026-6372

Malicious code in rollup-runtime-polyfill-core (npm)

MAL-2026-6365

Malicious code in assertcore (npm)

MAL-2026-6366

Malicious code in backpack-ios (npm)

MAL-2026-6371

Malicious code in llm-traces-app (npm)

MAL-2026-6373

Malicious code in twilio-voice-js-reference-components (npm)

MAL-2026-6364

Malicious code in openllmapi (npm)

MAL-2026-6362

Malicious code in monty-data (npm)