Supply Chain Incidents

MAL-2026-10398

Malicious code in @db-tools/main-app (npm)

MAL-2026-10400

Malicious code in @equansservices/tool (npm)

MAL-2026-10399

Malicious code in @equansservices/codex (npm)

MAL-2026-10397

Malicious code in @car_loans/dealerships-approval (npm)

MAL-2026-10220

Malicious code in @jplopezy/connectivity-test-do-not-install (npm)

MAL-2026-10219

Malicious code in chai-as-precision (npm)

MAL-2026-10218

Malicious code in pure-folder-three (npm)

MAL-2026-10217

Malicious code in dotnet-runtime-base (npm)

MAL-2026-10216

Malicious code in node-sysmetrics (npm)

MAL-2026-10228

Malicious code in chat-adapter-zoom (npm)

MAL-2026-10232

Malicious code in salesforce-vscode-slds (npm)

MAL-2026-10234

Malicious code in slds-lsp-client (npm)

MAL-2026-10214

Malicious code in babel-preset-lib-client (npm)

MAL-2026-10209

Malicious code in auto-debug-tool (npm)

MAL-2026-10212

Malicious code in vuln-package (npm)

MAL-2026-10210

Malicious code in mcp-notes-server-poc-praetorian (npm)

MAL-2026-10208

Malicious code in @meziizana/frontend-logger (npm)

MAL-2026-10211

Malicious code in react-next-vite (npm)

MAL-2026-10206

Malicious code in nullrift (npm)

MAL-2026-10202

Malicious code in chain-await-dom (npm)

MAL-2026-10207

Malicious code in react-dom-v17 (npm)

MAL-2026-10205

Malicious code in library-explorer (npm)

MAL-2026-10203

Malicious code in giantswarm (npm)

MAL-2026-10200

Malicious code in api-changelly (npm)