Supply Chain Incidents

MAL-2026-10553

Malicious code in home-mp-commons (npm)

MAL-2026-10565

Malicious code in relative-time-live (npm)

MAL-2026-10560

Malicious code in clipboard-drop (npm)

MAL-2026-10561

Malicious code in dom-weave (npm)

MAL-2026-10567

Malicious code in string-morph (npm)

MAL-2026-10566

Malicious code in sight-bind (npm)

MAL-2026-10563

Malicious code in humanize-kit (npm)

MAL-2026-10570

Malicious code in valid-scope (npm)

MAL-2026-10562

Malicious code in duration-kit (npm)

MAL-2026-10569

Malicious code in temp-cloak (npm)

MAL-2026-10559

Malicious code in avatar-forge (npm)

MAL-2026-10568

Malicious code in sync-logger (npm)

MAL-2026-10555

Malicious code in @codex2005/logger-core (npm)

MAL-2026-10550

Malicious code in better-tailwindcss (npm)

MAL-2026-10546

Malicious code in viteplugiin (npm)

MAL-2026-10531

Malicious code in chain-devkit (npm)

MAL-2026-10535

Malicious code in my-empty-package (npm)

MAL-2026-10532

Malicious code in fluterjs (npm)

MAL-2026-10530

Malicious code in cbr-internal-utils (npm)

MAL-2026-10537

Malicious code in neon-postgres (npm)

MAL-2026-10533

Malicious code in lusha-iam-widgets (npm)

MAL-2026-10536

Malicious code in n8n-nodes-social-facebook (npm)

MAL-2026-10541

Malicious code in proxy-seller-mcp (npm)

MAL-2026-10543

Malicious code in skrill-payments (npm)