Supply Chain Incidents

MAL-2026-10566

Malicious code in sight-bind (npm)

MAL-2026-10570

Malicious code in valid-scope (npm)

MAL-2026-10559

Malicious code in avatar-forge (npm)

MAL-2026-10569

Malicious code in temp-cloak (npm)

MAL-2026-10562

Malicious code in duration-kit (npm)

MAL-2026-10563

Malicious code in humanize-kit (npm)

MAL-2026-10555

Malicious code in @codex2005/logger-core (npm)

MAL-2026-10550

Malicious code in better-tailwindcss (npm)

MAL-2026-10546

Malicious code in viteplugiin (npm)

MAL-2026-10531

Malicious code in chain-devkit (npm)

MAL-2026-10535

Malicious code in my-empty-package (npm)

MAL-2026-10532

Malicious code in fluterjs (npm)

MAL-2026-10530

Malicious code in cbr-internal-utils (npm)

MAL-2026-10537

Malicious code in neon-postgres (npm)

MAL-2026-10533

Malicious code in lusha-iam-widgets (npm)

MAL-2026-10536

Malicious code in n8n-nodes-social-facebook (npm)

MAL-2026-10541

Malicious code in proxy-seller-mcp (npm)

MAL-2026-10543

Malicious code in skrill-payments (npm)

MAL-2026-10538

Malicious code in neteller (npm)

MAL-2026-10544

Malicious code in skrill-sdk (npm)

MAL-2026-10542

Malicious code in skrill (npm)

MAL-2026-10540

Malicious code in postcss-processor-utils (npm)

MAL-2026-10539

Malicious code in postcss-animatecss (npm)

MAL-2026-10545

Malicious code in vite-plugin-model (npm)