Supply Chain Incidents

MAL-2026-10082

Malicious code in chain-async-dom (npm)

MAL-2026-10083

Malicious code in clob-math-v2 (npm)

MAL-2026-10084

Malicious code in conversionvaluemanager (npm)

MAL-2026-10088

Malicious code in lovable-tager (npm)

MAL-2026-10087

Malicious code in eslint-plus (npm)

MAL-2026-10090

Malicious code in nonenull1 (npm)

MAL-2026-10085

Malicious code in dependency_confusions (npm)

MAL-2026-10058

Malicious code in cookie-js-ease (npm)

MAL-2026-10059

Malicious code in cookie-parser-es (npm)

MAL-2026-10060

Malicious code in cookie-parser-js (npm)

MAL-2026-10064

Malicious code in multer-orm (npm)

MAL-2026-10063

Malicious code in express-router-engine (npm)

MAL-2026-10057

Malicious code in chunk-parser (npm)

MAL-2026-10077

Malicious code in type-slint (npm)

MAL-2026-10066

Malicious code in nps-retrieval-diagnostics (npm)

MAL-2026-10061

Malicious code in cursed-ecto-d3ab00 (npm)

MAL-2026-10067

Malicious code in polymarket-apis (npm)

MAL-2026-10072

Malicious code in polymarket-trader-apis (npm)

MAL-2026-10068

Malicious code in polymarket-kelly-math (npm)

MAL-2026-10070

Malicious code in polymarket-kelly-stake-math (npm)

MAL-2026-10071

Malicious code in polymarket-kit (npm)

MAL-2026-10069

Malicious code in polymarket-kelly-maths (npm)

MAL-2026-10062

Malicious code in es6-codify (npm)

MAL-2026-10081

Malicious code in webrix-docs1 (npm)