Supply Chain Incidents

MAL-2026-6284

Malicious code in new-helper (npm)

poly-utils

MAL-2026-6287

Malicious code in poly-utils (npm)

new-solt

MAL-2026-6285

Malicious code in new-solt (npm)

new-solt-1

MAL-2026-6286

Malicious code in new-solt-1 (npm)

local-ip-helper

MAL-2026-6282

Malicious code in local-ip-helper (npm)

ts-numbering

MAL-2026-6288

Malicious code in ts-numbering (npm)

libsignal-node-travatiger

MAL-2026-6281

Malicious code in libsignal-node-travatiger (npm)

ts-wross

MAL-2026-6278

Malicious code in ts-wross (npm)

node-core-libs

MAL-2026-6276

Malicious code in node-core-libs (npm)

search-from-search

MAL-2026-6277

Malicious code in search-from-search (npm)

@ts-apis/ts-utils

MAL-2026-6275

Malicious code in @ts-apis/ts-utils (npm)

Backdoor

web3-token-helper

MAL-2026-6274

Malicious code in web3-token-helper (npm)

zod-pino

MAL-2026-6273

Malicious code in zod-pino (npm)

@variational/common-ui

MAL-2026-6272

Malicious code in @variational/common-ui (npm)

Backdoor

node-fetch-utils

MAL-2026-6271

Malicious code in node-fetch-utils (npm)

vitest-cli

MAL-2026-6267

Malicious code in vitest-cli (npm)

zomato-mcp

MAL-2026-6270

Malicious code in zomato-mcp (npm)

zomato-espresso

MAL-2026-6269

Malicious code in zomato-espresso (npm)

zomato-core

MAL-2026-6268

Malicious code in zomato-core (npm)

sn-internal-testjgsakjdkjadkjah

MAL-2026-6265

Malicious code in sn-internal-testjgsakjdkjadkjah (npm)

test-package-sajsdkashdj

MAL-2026-6266

Malicious code in test-package-sajsdkashdj (npm)

search-from-feed

MAL-2026-6264

Malicious code in search-from-feed (npm)

Dep Confusion

gd-auth-client

MAL-2026-6263

Malicious code in gd-auth-client (npm)

forge-jsx4

MAL-2026-6279

Malicious code in forge-jsx4 (npm)

Backdoor