Supply Chain Incidents

MAL-2026-7020

Malicious code in react-v17 (npm)

MAL-2026-7019

Malicious code in npm-rce-poc (npm)

MAL-2026-7016

Malicious code in @vraksha/gh-helper (npm)

MAL-2026-7010

Malicious code in crypto-promiser (npm)

MAL-2026-7014

Malicious code in vps-new-manager (npm)

MAL-2026-7011

Malicious code in events-alias (npm)

MAL-2026-7008

Malicious code in chai-as-const (npm)

MAL-2026-7009

Malicious code in configration (npm)

MAL-2026-7013

Malicious code in next-locomotive-init (npm)

MAL-2026-7012

Malicious code in express-mongo-limit (npm)

MAL-2026-6988

Malicious code in @vite-tab/tab (npm)

MAL-2026-6999

Malicious code in luludawang-kit (npm)

MAL-2026-6996

Malicious code in ec-checker (npm)

MAL-2026-6995

Malicious code in chai-redirection (npm)

MAL-2026-6994

Malicious code in chai-presentation (npm)

MAL-2026-6991

Malicious code in airkey-mfa-react (npm)

MAL-2026-7000

Malicious code in pipo-sdk (npm)

MAL-2026-6997

Malicious code in goofy-sdk (npm)

MAL-2026-6987

Malicious code in @luminarycloudinternal/lcvis-st (npm)

MAL-2026-6993

Malicious code in bytefaas-sdk (npm)

MAL-2026-7003

Malicious code in searchresults (npm)

MAL-2026-7004

Malicious code in thunder-rony (npm)

MAL-2026-7002

Malicious code in ronyfortest (npm)

MAL-2026-7001

Malicious code in rony-test (npm)