Supply Chain Incidents

MAL-2026-10095

Malicious code in fury_frontend-andes-ui (npm)

MAL-2026-10094

Malicious code in @equansservices/setup (npm)

MAL-2026-10093

Malicious code in @andrewstory18/is-real-odd (npm)

MAL-2026-10092

Malicious code in vite-pwa-config (npm)

MAL-2026-10086

Malicious code in dl-pp-latm (npm)

MAL-2026-10089

Malicious code in neon-poly-utls (npm)

MAL-2026-10082

Malicious code in chain-async-dom (npm)

MAL-2026-10083

Malicious code in clob-math-v2 (npm)

MAL-2026-10084

Malicious code in conversionvaluemanager (npm)

MAL-2026-10088

Malicious code in lovable-tager (npm)

MAL-2026-10087

Malicious code in eslint-plus (npm)

MAL-2026-10090

Malicious code in nonenull1 (npm)

MAL-2026-10085

Malicious code in dependency_confusions (npm)

MAL-2026-10058

Malicious code in cookie-js-ease (npm)

MAL-2026-10059

Malicious code in cookie-parser-es (npm)

MAL-2026-10060

Malicious code in cookie-parser-js (npm)

MAL-2026-10064

Malicious code in multer-orm (npm)

MAL-2026-10063

Malicious code in express-router-engine (npm)

MAL-2026-10057

Malicious code in chunk-parser (npm)

MAL-2026-10077

Malicious code in type-slint (npm)

MAL-2026-10066

Malicious code in nps-retrieval-diagnostics (npm)

MAL-2026-10061

Malicious code in cursed-ecto-d3ab00 (npm)

MAL-2026-10067

Malicious code in polymarket-apis (npm)

MAL-2026-10072

Malicious code in polymarket-trader-apis (npm)