Supply Chain Incidents

MAL-2026-4590

Malicious code in json-to-simple-graphql-schema (npm)

MAL-2026-4552

Malicious code in etherproxy-lite (npm)

MAL-2026-4396

Malicious code in @izumiswap/sdk (npm)

MAL-2026-4615

Malicious code in motion-tool (npm)

MAL-2026-4575

Malicious code in happy-dlscord.js (npm)

MAL-2026-4670

Malicious code in skills-detector (npm)

MAL-2026-4351

Malicious code in @databus-service-ui/ui-event (npm)

MAL-2026-4378

Malicious code in @databus-service-ui/scroll-up-content (npm)

MAL-2026-4408

Malicious code in @nolimit-x/win32-x64 (npm)

MAL-2026-4596

Malicious code in koishi-plugin-yuan (npm)

MAL-2026-4438

Malicious code in @service-suppliers/suppliers (npm)

MAL-2026-4344

Malicious code in verify-mycommand (npm)

MAL-2026-4439

Malicious code in @service-user-notifications/set_notifications_not_removable (npm)

MAL-2026-4437

Malicious code in @service-suppliers/set_selected_supplier (npm)

MAL-2026-4436

Malicious code in @service-suppliers/select-supplier-watcher-saga (npm)

MAL-2026-4435

Malicious code in @service-suppliers/fetch_suppliers_action_saga (npm)

MAL-2026-4622

Malicious code in normalize-path-seq (npm)

MAL-2026-4368

Malicious code in @beyondbday/vibe-terminal (npm)

MAL-2026-4570

Malicious code in gehneb (npm)

MAL-2026-4475

Malicious code in aes-decode-runner-pro (npm)

MAL-2026-4420

Malicious code in @polka-ui/loader (npm)

MAL-2026-4404

Malicious code in @loans/vehicles-api (npm)

MAL-2026-4592

Malicious code in jsontoken-extend (npm)

MAL-2026-4707

Malicious code in vue-compiler-sfc-plugin (npm)