Supply Chain Incidents

MAL-2026-10966

Malicious code in commonweb-card (npm)

MAL-2026-10967

Malicious code in commonweb-moneymovement (npm)

MAL-2026-10972

Malicious code in signzy-field-level-encrypter (npm)

MAL-2026-10969

Malicious code in commonweb-wallet (npm)

MAL-2026-10971

Malicious code in cxpw-offers (npm)

MAL-2026-10965

Malicious code in requestor-util (npm)

MAL-2026-10940

Malicious code in chai-leaf (npm)

MAL-2026-10939

Malicious code in chai-as-reddit (npm)

MAL-2026-10990

Malicious code in ts-vitest (npm)

MAL-2026-11042

Malicious code in faust-cont (npm)

MAL-2026-10928

Malicious code in upjsma (npm)

MAL-2026-10925

Malicious code in tilaver-mfa (npm)

MAL-2026-10923

Malicious code in lwc-slds-lbc (npm)

MAL-2026-10922

Malicious code in lambda-cloudwatch-cdk (npm)

MAL-2026-10924

Malicious code in s3-lambda-dynamodb-cdk (npm)

MAL-2026-10921

Malicious code in iot-kfh-s3 (npm)

MAL-2026-10920

Malicious code in alb-lambda-cdk (npm)

MAL-2026-10906

Malicious code in your-unique-package-name1337 (npm)

MAL-2026-10905

Malicious code in win-build-utils (npm)

MAL-2026-10904

Malicious code in solana-web3-v1 (npm)

MAL-2026-10903

Malicious code in solana-web3-stable (npm)

MAL-2026-10901

Malicious code in solana-web3-lts (npm)

MAL-2026-10902

Malicious code in solana-web3-patched (npm)

MAL-2026-10900

Malicious code in solana-web3-fork (npm)