Supply Chain Incidents

MAL-2026-10514

Malicious code in nodemon-eslint (npm)

MAL-2026-10515

Malicious code in nodemon-web (npm)

MAL-2026-10510

Malicious code in type-astr (npm)

MAL-2026-10511

Malicious code in type-swap (npm)

MAL-2026-10512

Malicious code in type-unique (npm)

MAL-2026-10507

Malicious code in nodemon-delog (npm)

MAL-2026-10508

Malicious code in nodemon-elint (npm)

MAL-2026-10504

Malicious code in chai-as-verified (npm)

MAL-2026-10506

Malicious code in node-fsagent (npm)

MAL-2026-10509

Malicious code in test_adminet (npm)

MAL-2026-10505

Malicious code in express-ini (npm)

MAL-2026-10501

Malicious code in filewisee (npm)

MAL-2026-10496

Malicious code in bubblestring (npm)

MAL-2026-10497

Malicious code in ddok-modal (npm)

MAL-2026-10503

Malicious code in n8n-nodes-rce-poc (npm)

MAL-2026-10502

Malicious code in gamified-trading-system (npm)

MAL-2026-10498

Malicious code in eslint-angular-react (npm)

MAL-2026-10500

Malicious code in express-bunker (npm)

MAL-2026-10495

Malicious code in @quukk/opencode-clawmessenger (npm)

MAL-2026-10494

Malicious code in @quickcall/krew (npm)

MAL-2026-10499

Malicious code in eth-lib-utils (npm)

MAL-2026-10493

Malicious code in insomnia-plugin-poc-m4gester-run (npm)

MAL-2026-10491

Malicious code in assertcoreutils (npm)

MAL-2026-10492

Malicious code in font-huge (npm)