Supply Chain Incidents

MAL-2026-10414

Malicious code in express-request-engine (npm)

MAL-2026-10425

Malicious code in trinity-scheme (npm)

MAL-2026-10417

Malicious code in minigptcore (npm)

MAL-2026-10405

Malicious code in @torbeck/heap (npm)

MAL-2026-10413

Malicious code in eth-base (npm)

MAL-2026-10424

Malicious code in terminal-mascot (npm)

MAL-2026-10407

Malicious code in awesome-terminal (npm)

MAL-2026-10406

Malicious code in async-chain-dom (npm)

MAL-2026-10408

Malicious code in chain-js-utils (npm)

MAL-2026-10418

Malicious code in note-utilities (npm)

MAL-2026-10410

Malicious code in cookie-phase (npm)

MAL-2026-10411

Malicious code in cookie-sign (npm)

MAL-2026-10392

Malicious code in tipsen-last-pls (npm)

MAL-2026-10283

Malicious code in another-poc-by-tipsen (npm)

MAL-2026-10391

Malicious code in tipsen-last (npm)

MAL-2026-10393

Malicious code in tipsen-poc-again (npm)

MAL-2026-10379

Malicious code in sixseven7 (npm)

MAL-2026-10262

Malicious code in abuden220 (npm)

MAL-2026-10266

Malicious code in abuden225 (npm)

MAL-2026-10282

Malicious code in acidic (npm)

MAL-2026-10259

Malicious code in abuden216 (npm)

MAL-2026-10386

Malicious code in testdonotredeemit (npm)

MAL-2026-10258

Malicious code in abuden215 (npm)

MAL-2026-10267

Malicious code in abuden226 (npm)