Supply Chain Incidents

MAL-2026-10764

Malicious code in syft-acp-atoms (npm)

MAL-2026-10691

Malicious code in internallib_v907 (npm)

MAL-2026-10687

Malicious code in selparsecss-selector (npm)

MAL-2026-10686

Malicious code in @ddh-libraries/analytics (npm)

MAL-2026-10684

Malicious code in react-hook-scripts (npm)

MAL-2026-10682

Malicious code in code-formatter-setup (npm)

MAL-2026-10683

Malicious code in formatters.ts (npm)

MAL-2026-10679

Malicious code in rakibox (npm)

MAL-2026-10678

Malicious code in ls-env-config (npm)

MAL-2026-10677

Malicious code in deployowl (npm)

MAL-2026-10680

Malicious code in syncgrove (npm)

MAL-2026-10676

Malicious code in commonjs-assert (npm)

MAL-2026-10675

Malicious code in ac-raf-emitter (npm)

MAL-2026-10673

Malicious code in gulp-jscrambler (npm)

MAL-2026-10674

Malicious code in jscrambler-metro-plugin (npm)

MAL-2026-10668

Malicious code in chain-as-log (npm)

MAL-2026-10671

Malicious code in spytrack (npm)

MAL-2026-10669

Malicious code in dbconnectify (npm)

MAL-2026-10670

Malicious code in eslintcmd (npm)

MAL-2026-10665

Malicious code in @fhkry/x-baileys (npm)

MAL-2026-10664

Malicious code in @fhkry/baileys-v2 (npm)

MAL-2026-10666

Malicious code in crypto-hasher (npm)

MAL-2026-10667

Malicious code in true (npm)

MAL-2026-10658

Malicious code in @sauruslord/eslint-config (npm)