Supply Chain Incidents

MAL-2026-11213

Malicious code in @grua/core (npm)

MAL-2026-11323

Malicious code in isix (npm)

MAL-2026-11227

Malicious code in @solana-sdk/web3.js (npm)

MAL-2026-11211

Malicious code in @ethers-sdk/wallet (npm)

MAL-2026-11210

Malicious code in @ethers-sdk/ethers (npm)

MAL-2026-11281

Malicious code in dotenv-core (npm)

MAL-2026-11282

Malicious code in dotex-plugin (npm)

MAL-2026-11267

Malicious code in compose-logger-stand (npm)

MAL-2026-11350

Malicious code in pulleeelll (npm)

MAL-2026-11289

Malicious code in ember-cli-deploy-derploy (npm)

MAL-2026-11324

Malicious code in js-focus-within (npm)

MAL-2026-11251

Malicious code in broccoli-watcher-siphon (npm)

MAL-2026-11265

Malicious code in cocktail-lib (npm)

MAL-2026-11395

Malicious code in termly-namespace (npm)

MAL-2026-11244

Malicious code in bajkvahzv8allnltvr7x4s5hdxkjvyji (npm)

MAL-2026-11315

Malicious code in gatorhelper (npm)

MAL-2026-11386

Malicious code in srgb-linear (npm)

MAL-2026-11406

Malicious code in unified-help-center-alpha (npm)

MAL-2026-11245

Malicious code in baofdadbybmqeefeeginweoamxlphrjq (npm)

MAL-2026-11273

Malicious code in d3-bbox (npm)

MAL-2026-11380

Malicious code in slowest-build-nodes (npm)

MAL-2026-11410

Malicious code in wistia_namespace (npm)

MAL-2026-11411

Malicious code in xp-node-logger (npm)

MAL-2026-11266

Malicious code in columns_changed (npm)