Supply Chain Incidents

MAL-2026-10122

Malicious code in dowload_ebok_murder_in_plain_english_by_michael_arntfield_marcel_danesi_uleto (npm)

dowload_ebok_wrath_of_the_gods_by_j_robert_kennedy_61o88

MAL-2026-10126

Malicious code in dowload_ebok_wrath_of_the_gods_by_j_robert_kennedy_61o88 (npm)

execfences

MAL-2026-10118

Malicious code in execfences (npm)

nodemon-slint

MAL-2026-10117

Malicious code in nodemon-slint (npm)

driftpin

MAL-2026-10114

Malicious code in driftpin (npm)

Backdoor

fmt-date-lite

MAL-2026-10115

Malicious code in fmt-date-lite (npm)

Typosquat

jwtmethod

MAL-2026-10116

Malicious code in jwtmethod (npm)

workspace-scripts

MAL-2026-10113

Malicious code in workspace-scripts (npm)

workspace-lint

MAL-2026-10112

Malicious code in workspace-lint (npm)

nodemon-patch

MAL-2026-10110

Malicious code in nodemon-patch (npm)

nodepack-daemon

MAL-2026-10111

Malicious code in nodepack-daemon (npm)

dc-repro

MAL-2026-10102

Malicious code in dc-repro (npm)

date-kit-lite

MAL-2026-10101

Malicious code in date-kit-lite (npm)

pxpure8

MAL-2026-10105

Malicious code in pxpure8 (npm)

px8my

MAL-2026-10104

Malicious code in px8my (npm)

validator-string

MAL-2026-10109

Malicious code in validator-string (npm)

Typosquat

url-func-registry

MAL-2026-10108

Malicious code in url-func-registry (npm)

Backdoor

security-node

MAL-2026-10107

Malicious code in security-node (npm)

optimize-regex

MAL-2026-10103

Malicious code in optimize-regex (npm)

rallycoding

MAL-2026-10106

Malicious code in rallycoding (npm)

polipoli-pak

MAL-2026-10099

Malicious code in polipoli-pak (npm)

@kl-starfish/test-01

MAL-2026-10097

Malicious code in @kl-starfish/test-01 (npm)

fastify-addone

MAL-2026-10098

Malicious code in fastify-addone (npm)

guest-app-ui

MAL-2026-10096

Malicious code in guest-app-ui (npm)