Supply Chain Incidents

MAL-2026-10058

Malicious code in cookie-js-ease (npm)

MAL-2026-10059

Malicious code in cookie-parser-es (npm)

MAL-2026-10060

Malicious code in cookie-parser-js (npm)

MAL-2026-10064

Malicious code in multer-orm (npm)

MAL-2026-10063

Malicious code in express-router-engine (npm)

MAL-2026-10057

Malicious code in chunk-parser (npm)

MAL-2026-10077

Malicious code in type-slint (npm)

MAL-2026-10066

Malicious code in nps-retrieval-diagnostics (npm)

MAL-2026-10061

Malicious code in cursed-ecto-d3ab00 (npm)

MAL-2026-10067

Malicious code in polymarket-apis (npm)

MAL-2026-10072

Malicious code in polymarket-trader-apis (npm)

MAL-2026-10068

Malicious code in polymarket-kelly-math (npm)

MAL-2026-10070

Malicious code in polymarket-kelly-stake-math (npm)

MAL-2026-10071

Malicious code in polymarket-kit (npm)

MAL-2026-10069

Malicious code in polymarket-kelly-maths (npm)

MAL-2026-10062

Malicious code in es6-codify (npm)

MAL-2026-10081

Malicious code in webrix-docs1 (npm)

MAL-2026-10080

Malicious code in webrix-docs (npm)

MAL-2026-10079

Malicious code in vybscan-testbed-obfuscated-postinstall (npm)

MAL-2026-10078

Malicious code in vybscan-testbed-inert-postinstall (npm)

MAL-2026-10076

Malicious code in ts-eslint-jest (npm)

MAL-2026-10074

Malicious code in testis-pack (npm)

MAL-2026-10075

Malicious code in testudo-pack (npm)

MAL-2026-10065

Malicious code in nodemon-gulp (npm)