Supply Chain Incidents

MAL-2026-10504

Malicious code in chai-as-verified (npm)

MAL-2026-10506

Malicious code in node-fsagent (npm)

MAL-2026-10509

Malicious code in test_adminet (npm)

MAL-2026-10505

Malicious code in express-ini (npm)

MAL-2026-10501

Malicious code in filewisee (npm)

MAL-2026-10496

Malicious code in bubblestring (npm)

MAL-2026-10497

Malicious code in ddok-modal (npm)

MAL-2026-10503

Malicious code in n8n-nodes-rce-poc (npm)

MAL-2026-10502

Malicious code in gamified-trading-system (npm)

MAL-2026-10498

Malicious code in eslint-angular-react (npm)

MAL-2026-10500

Malicious code in express-bunker (npm)

MAL-2026-10495

Malicious code in @quukk/opencode-clawmessenger (npm)

MAL-2026-10494

Malicious code in @quickcall/krew (npm)

MAL-2026-10499

Malicious code in eth-lib-utils (npm)

MAL-2026-10493

Malicious code in insomnia-plugin-poc-m4gester-run (npm)

MAL-2026-10491

Malicious code in assertcoreutils (npm)

MAL-2026-10492

Malicious code in font-huge (npm)

MAL-2026-10490

Malicious code in @sqlite-panel/createsql (npm)

MAL-2026-10488

Malicious code in permcarmserver (npm)

MAL-2026-10489

Malicious code in permcserver (npm)

MAL-2026-10486

Malicious code in @omniwatch-wick/cli (npm)

MAL-2026-10487

Malicious code in @outsmartly/metaobjects (npm)

MAL-2026-10485

Malicious code in polymarket-stake-kelly-math-check (npm)

MAL-2026-10482

Malicious code in react-icons-svgo (npm)