Supply Chain Incidents

MAL-2026-10190

Malicious code in tinyparrot (npm)

google-caja-bower

MAL-2026-10186

Malicious code in google-caja-bower (npm)

Dep Confusion

jscrambler

MAL-2026-10187

Malicious code in jscrambler (npm)

authvaultx

MAL-2026-10185

Malicious code in authvaultx (npm)

@uwr/colors

MAL-2026-10179

Malicious code in @uwr/colors (npm)

fkext-browser-min

MAL-2026-10183

Malicious code in fkext-browser-min (npm)

@broadpeak/smartlib-ad

MAL-2026-10178

Malicious code in @broadpeak/smartlib-ad (npm)

consumerweb

MAL-2026-10181

Malicious code in consumerweb (npm)

express-guardian

MAL-2026-10182

Malicious code in express-guardian (npm)

mongoose-schema-unique

MAL-2026-10184

Malicious code in mongoose-schema-unique (npm)

auth-next-gen

MAL-2026-10180

Malicious code in auth-next-gen (npm)

@jaymara/jsononifier

MAL-2026-10177

Malicious code in @jaymara/jsononifier (npm)

chai-as-doc

MAL-2026-10175

Malicious code in chai-as-doc (npm)

Typosquat

uncaxss

MAL-2026-10176

Malicious code in uncaxss (npm)

@injectivelabs/sdk-ts

MAL-2026-10165

Malicious code in @injectivelabs/sdk-ts (npm)

paysafe-vault

MAL-2026-10173

Malicious code in paysafe-vault (npm)

paysafe-payments

MAL-2026-10172

Malicious code in paysafe-payments (npm)

Typosquat

paysafe-node

MAL-2026-10171

Malicious code in paysafe-node (npm)

paysafe-kyc

MAL-2026-10170

Malicious code in paysafe-kyc (npm)

paysafe-fraud

MAL-2026-10168

Malicious code in paysafe-fraud (npm)

Typosquat

paysafe-js

MAL-2026-10169

Malicious code in paysafe-js (npm)

paysafe-checkout

MAL-2026-10167

Malicious code in paysafe-checkout (npm)

paysafe-api

MAL-2026-10166

Malicious code in paysafe-api (npm)

type-atob

MAL-2026-10174

Malicious code in type-atob (npm)