Supply Chain Incidents

MAL-2026-13696

Malicious code in postcss-initial-provider (npm)

MAL-2026-13692

Malicious code in chai-jsonss (npm)

MAL-2026-13695

Malicious code in hex-encode-utils (npm)

MAL-2026-13689

Malicious code in @noobaihome/amis-simple-area-widget (npm)

MAL-2026-13690

Malicious code in @noobaihome/amis-uni-area-widget (npm)

MAL-2026-13693

Malicious code in cryptostock (npm)

MAL-2026-13694

Malicious code in env-local (npm)

MAL-2026-13698

Malicious code in simple-date-formatter-new-9 (npm)

MAL-2026-13697

Malicious code in simple-date-formatter-new-10 (npm)

MAL-2026-13687

Malicious code in tokocrytodev (npm)

MAL-2026-13684

Malicious code in @ssgw/icon (npm)

MAL-2026-13670

Malicious code in statist-browser-typed-client-eventea.projects.pwafamily (npm)

MAL-2026-13674

Malicious code in statist-browser-typed-client-eventea.projects.tdeal (npm)

MAL-2026-13680

Malicious code in test-noexist-xyz-99 (npm)

MAL-2026-13671

Malicious code in statist-browser-typed-client-eventea.projects.pwahelp (npm)

MAL-2026-13673

Malicious code in statist-browser-typed-client-eventea.projects.pwakasko (npm)

MAL-2026-13672

Malicious code in statist-browser-typed-client-eventea.projects.pwainsurance (npm)

MAL-2026-13675

Malicious code in statist-browser-typed-client-eventea.projects.tdevice (npm)

MAL-2026-13669

Malicious code in specials-resources-server (npm)

MAL-2026-13677

Malicious code in svelte-kit-cache (npm)

MAL-2026-13679

Malicious code in svelte-streak-kit (npm)

MAL-2026-13629

Malicious code in @coralxyz/anchor (npm)

MAL-2026-13664

Malicious code in titan-exchange-shared-permissions (npm)

MAL-2026-13633

Malicious code in modern-localization (npm)