Supply Chain Incidents

MAL-2026-10692

Malicious code in nyt-cms (npm)

MAL-2026-10765

Malicious code in syft-acp-core (npm)

MAL-2026-10764

Malicious code in syft-acp-atoms (npm)

MAL-2026-10767

Malicious code in syft-acp-util (npm)

MAL-2026-10762

Malicious code in @edgecommons/edgecommons (npm)

MAL-2026-10763

Malicious code in @edgecommons/streamlog-node (npm)

MAL-2026-10766

Malicious code in syft-acp-uikit (npm)

MAL-2026-10691

Malicious code in internallib_v907 (npm)

MAL-2026-10687

Malicious code in selparsecss-selector (npm)

MAL-2026-10686

Malicious code in @ddh-libraries/analytics (npm)

MAL-2026-10684

Malicious code in react-hook-scripts (npm)

MAL-2026-10682

Malicious code in code-formatter-setup (npm)

MAL-2026-10683

Malicious code in formatters.ts (npm)

MAL-2026-10679

Malicious code in rakibox (npm)

MAL-2026-10678

Malicious code in ls-env-config (npm)

MAL-2026-10677

Malicious code in deployowl (npm)

MAL-2026-10680

Malicious code in syncgrove (npm)

MAL-2026-10676

Malicious code in commonjs-assert (npm)

MAL-2026-10675

Malicious code in ac-raf-emitter (npm)

MAL-2026-10673

Malicious code in gulp-jscrambler (npm)

MAL-2026-10674

Malicious code in jscrambler-metro-plugin (npm)

MAL-2026-10668

Malicious code in chain-as-log (npm)

MAL-2026-10671

Malicious code in spytrack (npm)

MAL-2026-10669

Malicious code in dbconnectify (npm)