Supply Chain Incidents

MAL-2026-14101

Malicious code in @junofficial/baileys (npm)

MAL-2026-14103

Malicious code in a.poltoradnev-package-a (npm)

MAL-2026-14102

Malicious code in @siwatfa/yorn (npm)

MAL-2026-14116

Malicious code in runtime-health (npm)

MAL-2026-14070

Malicious code in @ai-vertical/ai-agent (npm)

MAL-2026-14068

Malicious code in depcruise-wrap-stream-in-html (npm)

MAL-2026-14067

Malicious code in upload-to-gcp (npm)

MAL-2026-14066

Malicious code in akamaijs-sensorv1 (npm)

MAL-2026-14065

Malicious code in akamai-sensor (npm)

MAL-2026-14064

Malicious code in @finaxis/common-js (npm)

MAL-2026-14058

Malicious code in adxaa (npm)

MAL-2026-14057

Malicious code in @openrepl/shared (npm)

MAL-2026-14060

Malicious code in fastly-vcl-language-client (npm)

MAL-2026-14063

Malicious code in twilio-hackerone-poc-afe6937c (npm)

MAL-2026-14061

Malicious code in hunterone-build-probe-9210 (npm)

MAL-2026-14062

Malicious code in tw-pkgprobe-7731 (npm)

MAL-2026-14059

Malicious code in autbank-core (npm)

MAL-2026-14056

Malicious code in gunzip-js (npm)

MAL-2026-14054

Malicious code in depcruise-fmt (npm)

MAL-2026-14053

Malicious code in depcruise-baseline (npm)

MAL-2026-14055

Malicious code in harmony-app-toolkit (npm)

MAL-2026-14052

Malicious code in require-i18next (npm)

MAL-2026-14086

Malicious code in kit-hydration-vim (npm)

MAL-2026-14096

Malicious code in svelte-goal-vim (npm)