Supply Chain Incidents

MAL-2026-10395

Malicious code in vibewise-cli (npm)

MAL-2026-10303

Malicious code in gpapps (npm)

MAL-2026-10302

Malicious code in gpapp (npm)

MAL-2026-10284

Malicious code in apps-gpt (npm)

MAL-2026-10394

Malicious code in vibewise (npm)

MAL-2026-10402

Malicious code in @gleamkit/ws (npm)

MAL-2026-10403

Malicious code in @iana-rzms/bff-sdk (npm)

MAL-2026-10401

Malicious code in @espn-ping/react-dmed-oauth (npm)

MAL-2026-10398

Malicious code in @db-tools/main-app (npm)

MAL-2026-10400

Malicious code in @equansservices/tool (npm)

MAL-2026-10399

Malicious code in @equansservices/codex (npm)

MAL-2026-10397

Malicious code in @car_loans/dealerships-approval (npm)

MAL-2026-10220

Malicious code in @jplopezy/connectivity-test-do-not-install (npm)

MAL-2026-10219

Malicious code in chai-as-precision (npm)

MAL-2026-10218

Malicious code in pure-folder-three (npm)

MAL-2026-10217

Malicious code in dotnet-runtime-base (npm)

MAL-2026-10216

Malicious code in node-sysmetrics (npm)

MAL-2026-10232

Malicious code in salesforce-vscode-slds (npm)

MAL-2026-10234

Malicious code in slds-lsp-client (npm)

MAL-2026-10228

Malicious code in chat-adapter-zoom (npm)

MAL-2026-10214

Malicious code in babel-preset-lib-client (npm)

MAL-2026-10209

Malicious code in auto-debug-tool (npm)

MAL-2026-10212

Malicious code in vuln-package (npm)

MAL-2026-10210

Malicious code in mcp-notes-server-poc-praetorian (npm)