Supply Chain Incidents

MAL-2026-10435

Malicious code in fetchcraft (npm)

MAL-2026-10438

Malicious code in netspeedutil (npm)

MAL-2026-10436

Malicious code in jest-formatter (npm)

MAL-2026-10434

Malicious code in env-fast (npm)

MAL-2026-10431

Malicious code in @tailwind-ts/eslint-plugin (npm)

MAL-2026-10440

Malicious code in type-context (npm)

MAL-2026-10439

Malicious code in react-hot-svg (npm)

MAL-2026-10433

Malicious code in chain-guardian (npm)

MAL-2026-10432

Malicious code in animated-css-kit (npm)

MAL-2026-10437

Malicious code in jsonfb (npm)

MAL-2026-10429

Malicious code in @nsub/nitxe (npm)

MAL-2026-10430

Malicious code in prettier-plugin-base (npm)

MAL-2026-10428

Malicious code in sysb1 (npm)

MAL-2026-10427

Malicious code in svg-fetcher (npm)

MAL-2026-10426

Malicious code in chai-log (npm)

MAL-2026-10404

Malicious code in @ica-gaming/slot-engine (npm)

MAL-2026-10415

Malicious code in frontend-regulations (npm)

MAL-2026-10419

Malicious code in notifications-broadcast (npm)

MAL-2026-10421

Malicious code in portway (npm)

MAL-2026-10422

Malicious code in sso-users-detection (npm)

MAL-2026-10420

Malicious code in path-addon-extend (npm)

MAL-2026-10409

Malicious code in cold-debug-elevator (npm)

MAL-2026-10423

Malicious code in supertokens-web (npm)

MAL-2026-10412

Malicious code in env-stream (npm)