Supply Chain Incidents

MAL-2026-17311

Malicious code in itsmeeaizat-bailey (npm)

MAL-2026-17305

Malicious code in esm-dotenv (npm)

MAL-2026-17309

Malicious code in stestenv (npm)

MAL-2026-17310

Malicious code in tailwind-forms-kit (npm)

MAL-2026-17307

Malicious code in fabric-mod-utils (npm)

MAL-2026-17304

Malicious code in dotenv-precheck (npm)

MAL-2026-17306

Malicious code in fabric-loader-core (npm)

MAL-2026-17308

Malicious code in mfahelper (npm)

MAL-2026-17302

Malicious code in solidity-lock (npm)

MAL-2026-17303

Malicious code in web-vitals-polyfill-core-v1 (npm)

MAL-2026-17301

Malicious code in fs-commons (npm)

MAL-2026-17300

Malicious code in common-fs (npm)

MAL-2026-17296

Malicious code in test-agency-assignment-01 (npm)

MAL-2026-17297

Malicious code in test-agency-assignment-02 (npm)

MAL-2026-17295

Malicious code in test-agency-assign (npm)

MAL-2026-17299

Malicious code in testosu8887 (npm)

MAL-2026-17298

Malicious code in testosu888 (npm)

MAL-2026-17294

Malicious code in react-nodejs (npm)

MAL-2026-17293

Malicious code in @selfpentest/eslint-pentest-plugin (npm)

MAL-2026-17292

Malicious code in @selfpentest/bin-confusion (npm)

MAL-2026-17291

Malicious code in @rutxploit-sec/waves-icons (npm)

MAL-2026-17289

Malicious code in @rutxploit-sec/subsplash-google-tag-manager (npm)

MAL-2026-17288

Malicious code in @rutxploit-sec/subsplash-canny (npm)

MAL-2026-17290

Malicious code in @rutxploit-sec/waves-button-poc (npm)