Supply Chain Incidents

MAL-2026-11373

Malicious code in rph-validator (npm)

MAL-2026-11379

Malicious code in shsk (npm)

MAL-2026-11335

Malicious code in n158 (npm)

MAL-2026-11318

Malicious code in ideascloud (npm)

MAL-2026-11311

Malicious code in files-bucket-server (npm)

MAL-2026-11331

Malicious code in merg-descripters (npm)

MAL-2026-11305

Malicious code in express-test-dependency (npm)

MAL-2026-11212

Malicious code in @goodjavascript/dotenv (npm)

MAL-2026-11280

Malicious code in discord-starter (npm)

MAL-2026-11278

Malicious code in discord-ms (npm)

MAL-2026-11235

Malicious code in ag-grid-boost (npm)

MAL-2026-11320

Malicious code in imut-set (npm)

MAL-2026-11365

Malicious code in react-ag-grid (npm)

MAL-2026-11327

Malicious code in lodash-ex (npm)

MAL-2026-11409

Malicious code in wastu (npm)

MAL-2026-11396

Malicious code in test-wastu (npm)

MAL-2026-11377

Malicious code in scol (npm)

MAL-2026-11248

Malicious code in blbird (npm)

MAL-2026-11412

Malicious code in zcas (npm)

MAL-2026-11384

Malicious code in spectral-corsair (npm)

MAL-2026-11272

Malicious code in curse-dependent (npm)

MAL-2026-11287

Malicious code in ecto-logger (npm)

MAL-2026-11232

Malicious code in @spectraltest/loglevel (npm)

MAL-2026-11385

Malicious code in spectral-wraith (npm)