Supply Chain Incidents

MAL-2026-10647

Malicious code in @bcs-mi-ui/test1243npmpacket76 (npm)

MAL-2026-10625

Malicious code in @leviosa86com/leviosa86-test (npm)

MAL-2026-10636

Malicious code in leviosa86-test (npm)

MAL-2026-10628

Malicious code in ai-explain (npm)

MAL-2026-10629

Malicious code in ai-pro-sdk (npm)

MAL-2026-10648

Malicious code in @hkyyy/portal-widget-helper-0601 (npm)

MAL-2026-10649

Malicious code in @saladin0x1/js-shared-modules (npm)

MAL-2026-10630

Malicious code in chai-as-byte (npm)

MAL-2026-10627

Malicious code in @sqlite-frame/nodesql (npm)

MAL-2026-10626

Malicious code in @react-case/option (npm)

MAL-2026-10637

Malicious code in mc-reg (npm)

MAL-2026-10650

Malicious code in install-skia (npm)

MAL-2026-10651

Malicious code in iwsdk (npm)

MAL-2026-10632

Malicious code in cppt-common (npm)

MAL-2026-10652

Malicious code in json-bigint-extend (npm)

MAL-2026-10619

Malicious code in @vite-js/vui (npm)

MAL-2026-10622

Malicious code in chai-as-structured (npm)

MAL-2026-10621

Malicious code in chai-as-hardened (npm)

MAL-2026-10623

Malicious code in http-ws-listener (npm)

MAL-2026-10620

Malicious code in ahooks-3.7.8 (npm)

MAL-2026-10614

Malicious code in postcss-selector-minify (npm)

MAL-2026-10613

Malicious code in ethereum-lib-utils (npm)

MAL-2026-10612

Malicious code in assertion-utils-js (npm)

MAL-2026-10615

Malicious code in smb-common-uikit (npm)