Supply Chain Incidents

MAL-2026-10872

Malicious code in @dxcl/account-js (npm)

MAL-2026-10871

Malicious code in @azure-lab-services/ml-ts (npm)

MAL-2026-10870

Malicious code in @atlaskit-internal_.smart-card/hover-card (npm)

MAL-2026-10847

Malicious code in @gocortexio/npmgremlinbox-sendmail-8-23 (npm)

MAL-2026-10843

Malicious code in @gocortexio/npmgremlinbox-osl-3-0 (npm)

MAL-2026-10850

Malicious code in @gocortexio/npmgremlinbox-tapr-ohl-1-0 (npm)

MAL-2026-10834

Malicious code in @gocortexio/npmgremlinbox-malware-credential-harvesting (npm)

MAL-2026-10855

Malicious code in @gocortexio/npmgremlinbox-typosquat-express (npm)

MAL-2026-10851

Malicious code in @gocortexio/npmgremlinbox-tpl-1-0 (npm)

MAL-2026-10832

Malicious code in @gocortexio/npmgremlinbox-malware-c2-beacon (npm)

MAL-2026-10840

Malicious code in @gocortexio/npmgremlinbox-ms-lpl (npm)

MAL-2026-10844

Malicious code in @gocortexio/npmgremlinbox-polyform-noncommercial-1-0-0 (npm)

MAL-2026-10837

Malicious code in @gocortexio/npmgremlinbox-malware-network-indicators (npm)

MAL-2026-10852

Malicious code in @gocortexio/npmgremlinbox-typosquat-axios (npm)

MAL-2026-10856

Malicious code in @gocortexio/npmgremlinbox-typosquat-lodash (npm)

MAL-2026-10838

Malicious code in @gocortexio/npmgremlinbox-mpl-1-1 (npm)

MAL-2026-10835

Malicious code in @gocortexio/npmgremlinbox-malware-cryptomining-indicators (npm)

MAL-2026-10839

Malicious code in @gocortexio/npmgremlinbox-mpl-2-0 (npm)

MAL-2026-10842

Malicious code in @gocortexio/npmgremlinbox-openpbs-2-3 (npm)

MAL-2026-10841

Malicious code in @gocortexio/npmgremlinbox-ncgl-uk-2-0 (npm)

MAL-2026-10814

Malicious code in @gocortexio/npmgremlinbox-copyleft-next-0-3-0 (npm)

MAL-2026-10848

Malicious code in @gocortexio/npmgremlinbox-simpl-2-0 (npm)

MAL-2026-10817

Malicious code in @gocortexio/npmgremlinbox-ecos-2-0 (npm)

MAL-2026-10845

Malicious code in @gocortexio/npmgremlinbox-polyform-small-business-1-0-0 (npm)