Supply Chain Incidents

MAL-2026-10750

Malicious code in telemetry-metrics (npm)

MAL-2026-10730

Malicious code in codeam-cli (npm)

MAL-2026-10723

Malicious code in @yeaft/webchat-agent (npm)

MAL-2026-10725

Malicious code in agentto (npm)

MAL-2026-10746

Malicious code in sakuraai (npm)

MAL-2026-10718

Malicious code in @sciagent/cli (npm)

MAL-2026-10747

Malicious code in sensorium-mcp (npm)

MAL-2026-10732

Malicious code in hehehe (npm)

MAL-2026-10717

Malicious code in @onescience/onecode (npm)

MAL-2026-10705

Malicious code in @agent-link/agent (npm)

MAL-2026-10722

Malicious code in @whalent/agent-core (npm)

MAL-2026-10741

Malicious code in netcontrol-agent (npm)

MAL-2026-10743

Malicious code in nordpass (npm)

MAL-2026-10726

Malicious code in astro (npm)

MAL-2026-10720

Malicious code in @vibelet/cli (npm)

MAL-2026-10751

Malicious code in vanexa-agent (npm)

MAL-2026-10724

Malicious code in @yuandc/aica (npm)

MAL-2026-10734

Malicious code in infrastructure-common (npm)

MAL-2026-10740

Malicious code in myreviews-core (npm)

MAL-2026-10739

Malicious code in mw-server-util (npm)

MAL-2026-10731

Malicious code in date-utils-light (npm)

MAL-2026-10733

Malicious code in idlive-document-capture-web (npm)

MAL-2026-10710

Malicious code in @equans-services/codex (npm)

MAL-2026-10737

Malicious code in mmagrt (npm)