Supply Chain Incidents

MAL-2026-10116

Malicious code in jwtmethod (npm)

MAL-2026-10113

Malicious code in workspace-scripts (npm)

MAL-2026-10112

Malicious code in workspace-lint (npm)

MAL-2026-10110

Malicious code in nodemon-patch (npm)

MAL-2026-10111

Malicious code in nodepack-daemon (npm)

MAL-2026-10102

Malicious code in dc-repro (npm)

MAL-2026-10101

Malicious code in date-kit-lite (npm)

MAL-2026-10105

Malicious code in pxpure8 (npm)

MAL-2026-10104

Malicious code in px8my (npm)

MAL-2026-10109

Malicious code in validator-string (npm)

MAL-2026-10108

Malicious code in url-func-registry (npm)

MAL-2026-10107

Malicious code in security-node (npm)

MAL-2026-10103

Malicious code in optimize-regex (npm)

MAL-2026-10106

Malicious code in rallycoding (npm)

MAL-2026-10099

Malicious code in polipoli-pak (npm)

MAL-2026-10097

Malicious code in @kl-starfish/test-01 (npm)

MAL-2026-10098

Malicious code in fastify-addone (npm)

MAL-2026-10096

Malicious code in guest-app-ui (npm)

MAL-2026-10095

Malicious code in fury_frontend-andes-ui (npm)

MAL-2026-10094

Malicious code in @equansservices/setup (npm)

MAL-2026-10093

Malicious code in @andrewstory18/is-real-odd (npm)

MAL-2026-10092

Malicious code in vite-pwa-config (npm)

MAL-2026-10086

Malicious code in dl-pp-latm (npm)

MAL-2026-10089

Malicious code in neon-poly-utls (npm)