Supply Chain Incidents

MAL-2026-10747

Malicious code in sensorium-mcp (npm)

MAL-2026-10732

Malicious code in hehehe (npm)

MAL-2026-10717

Malicious code in @onescience/onecode (npm)

MAL-2026-10705

Malicious code in @agent-link/agent (npm)

MAL-2026-10722

Malicious code in @whalent/agent-core (npm)

MAL-2026-10741

Malicious code in netcontrol-agent (npm)

MAL-2026-10743

Malicious code in nordpass (npm)

MAL-2026-10726

Malicious code in astro (npm)

MAL-2026-10720

Malicious code in @vibelet/cli (npm)

MAL-2026-10751

Malicious code in vanexa-agent (npm)

MAL-2026-10724

Malicious code in @yuandc/aica (npm)

MAL-2026-10734

Malicious code in infrastructure-common (npm)

MAL-2026-10740

Malicious code in myreviews-core (npm)

MAL-2026-10739

Malicious code in mw-server-util (npm)

MAL-2026-10731

Malicious code in date-utils-light (npm)

MAL-2026-10733

Malicious code in idlive-document-capture-web (npm)

MAL-2026-10710

Malicious code in @equans-services/codex (npm)

MAL-2026-10737

Malicious code in mmagrt (npm)

MAL-2026-10752

Malicious code in xxdxa (npm)

MAL-2026-10738

Malicious code in mui-option (npm)

MAL-2026-10749

Malicious code in sync-grove (npm)

MAL-2026-10712

Malicious code in @hibachi-xyz/common (npm)

MAL-2026-10735

Malicious code in isite (npm)

MAL-2026-10713

Malicious code in @hibachi-xyz/config (npm)