Supply Chain Incidents

MAL-2026-13493

Malicious code in velabuild (npm)

MAL-2026-13492

Malicious code in rdfxvela-build (npm)

MAL-2026-13480

Malicious code in @prototypevip/baileys (npm)

MAL-2026-13484

Malicious code in merge-grid-stats (npm)

MAL-2026-13482

Malicious code in diezyclutch-baileys (npm)

MAL-2026-13481

Malicious code in cdf-tag-commander-helper (npm)

MAL-2026-13478

Malicious code in @cats-cdf/authentication (npm)

MAL-2026-13479

Malicious code in @cats-cdf/browser-metrics-meter (npm)

MAL-2026-13485

Malicious code in weight2loss (npm)

MAL-2026-13483

Malicious code in internallib_v514 (npm)

MAL-2026-13455

Malicious code in remote-claude-daemon (npm)

MAL-2026-13456

Malicious code in santana-baileys (npm)

MAL-2026-13457

Malicious code in shadowx-fca (npm)

MAL-2026-13458

Malicious code in squeez (npm)

MAL-2026-13461

Malicious code in supersig (npm)

MAL-2026-13462

Malicious code in trimprompt (npm)

MAL-2026-13463

Malicious code in vite-plugin-cleaner (npm)

MAL-2026-13464

Malicious code in vite-svg-parse (npm)

MAL-2026-13465

Malicious code in vite-vue-path-map (npm)

MAL-2026-13468

Malicious code in xdaxx (npm)

MAL-2026-13469

Malicious code in xxdxax (npm)

MAL-2026-13470

Malicious code in ynastore-baileys (npm)

MAL-2026-13471

Malicious code in zyr-agent (npm)

MAL-2026-13445

Malicious code in elephant-tusk-runner (npm)