Supply Chain Incidents

MAL-2026-6420

Malicious code in leo-cdk-lib (npm)

leo-config

MAL-2026-6422

Malicious code in leo-config (npm)

leo-connector-mongo

MAL-2026-6424

Malicious code in leo-connector-mongo (npm)

serverless-leo

MAL-2026-6435

Malicious code in serverless-leo (npm)

leo-connector-redshift

MAL-2026-6427

Malicious code in leo-connector-redshift (npm)

leo-cron

MAL-2026-6428

Malicious code in leo-cron (npm)

rstreams-shard-util

MAL-2026-6433

Malicious code in rstreams-shard-util (npm)

leo-connector-mysql

MAL-2026-6425

Malicious code in leo-connector-mysql (npm)

rstreams-metrics

MAL-2026-6432

Malicious code in rstreams-metrics (npm)

syco1

MAL-2026-6404

Malicious code in syco1 (npm)

syspo

MAL-2026-6406

Malicious code in syspo (npm)

sypoi1

MAL-2026-6405

Malicious code in sypoi1 (npm)

@kl-dolphin/jump

MAL-2026-6403

Malicious code in @kl-dolphin/jump (npm)

@kl-dolphin/swim

MAL-2026-6402

Malicious code in @kl-dolphin/swim (npm)

zenith-utils

MAL-2026-6401

Malicious code in zenith-utils (npm)

normalize-plus

MAL-2026-6399

Malicious code in normalize-plus (npm)

ui-core-system

MAL-2026-6398

Malicious code in ui-core-system (npm)

ldapaotest

MAL-2026-6397

Malicious code in ldapaotest (npm)

cccmyssr2

MAL-2026-6391

Malicious code in cccmyssr2 (npm)

cccmyssr-util

MAL-2026-6390

Malicious code in cccmyssr-util (npm)

cccmyssr3

MAL-2026-6392

Malicious code in cccmyssr3 (npm)

react-campaign-optimizer

MAL-2026-6395

Malicious code in react-campaign-optimizer (npm)

signup-embedder

MAL-2026-6396

Malicious code in signup-embedder (npm)

Dep Confusion

chai-as-predicted

MAL-2026-6393

Malicious code in chai-as-predicted (npm)

Typosquat