Supply Chain Incidents

MAL-2026-10954

Malicious code in @markscan/utils (npm)

MAL-2026-10949

Malicious code in @iphouse/api (npm)

MAL-2026-10952

Malicious code in @markscan/core (npm)

MAL-2026-10931

Malicious code in org-twilio-phone-numbers-utils (npm)

MAL-2026-10944

Malicious code in zer0onetencent (npm)

MAL-2026-10964

Malicious code in markscan-utils (npm)

MAL-2026-11043

Malicious code in supplyhub (npm)

MAL-2026-11044

Malicious code in tailwind-gutenberg-block-zero (npm)

MAL-2026-10951

Malicious code in @markscan/api (npm)

MAL-2026-10947

Malicious code in @akrai/report (npm)

MAL-2026-10933

Malicious code in twilio-deploy (npm)

MAL-2026-10953

Malicious code in @markscan/reports (npm)

MAL-2026-10962

Malicious code in markscan-core (npm)

MAL-2026-10941

Malicious code in aftermath-finance (npm)

MAL-2026-10937

Malicious code in twilio-serverless (npm)

MAL-2026-10946

Malicious code in @akrai/core (npm)

MAL-2026-10934

Malicious code in twilio-internal (npm)

MAL-2026-10955

Malicious code in akrai-report (npm)

MAL-2026-10932

Malicious code in twilio-assets (npm)

MAL-2026-10781

Malicious code in chart-animation-helper (npm)

MAL-2026-10782

Malicious code in zoom-widget-xss-poc-paresh (npm)

MAL-2026-10778

Malicious code in relativity-pdfjs-dist (npm)

MAL-2026-10773

Malicious code in telemetry-axios (npm)

MAL-2026-10772

Malicious code in axios-native (npm)