Supply Chain Incidents

MAL-2026-13960

Malicious code in process-live-log (npm)

MAL-2026-13937

Malicious code in @ethers-js/contracts (npm)

MAL-2026-13940

Malicious code in @opezneppelin/contracts (npm)

MAL-2026-13956

Malicious code in npm-hex-utils (npm)

MAL-2026-13953

Malicious code in js-assert-plus (npm)

MAL-2026-13954

Malicious code in minimalistic-assert-plus (npm)

MAL-2026-13958

Malicious code in power-assert-plus (npm)

MAL-2026-13957

Malicious code in postcss-initialize-plugin (npm)

MAL-2026-13948

Malicious code in debug-proxy-chrome-devtools (npm)

MAL-2026-13946

Malicious code in date-fmt-helper-xz (npm)

MAL-2026-13955

Malicious code in mutex-forge (npm)

MAL-2026-13947

Malicious code in date-fmt-utils-helper (npm)

MAL-2026-13945

Malicious code in core-js-buffer (npm)

MAL-2026-14001

Malicious code in finvu-hdfc-sdk (npm)

MAL-2026-14000

Malicious code in blocks-angular (npm)

MAL-2026-13995

Malicious code in @dsp-next-gen-ui/needs-review (npm)

MAL-2026-14002

Malicious code in index-design-system (npm)

MAL-2026-13994

Malicious code in @caspianph/third-npm-package (npm)

MAL-2026-13993

Malicious code in @caspianph/second-npm-package (npm)

MAL-2026-13992

Malicious code in @caspianph/first-npm-package (npm)

MAL-2026-14014

Malicious code in try-lock-runner (npm)

MAL-2026-13999

Malicious code in async-lock-queue (npm)

MAL-2026-14012

Malicious code in single-flight-lock (npm)

MAL-2026-14011

Malicious code in shared-slot-gate (npm)