Supply Chain Incidents

MAL-2026-6279

Malicious code in forge-jsx4 (npm)

Backdoor

onboarding-respects-modal

MAL-2026-6258

Malicious code in onboarding-respects-modal (npm)

Dep Confusion

respects-switch

MAL-2026-6259

Malicious code in respects-switch (npm)

Dep Confusion

@dexwilt/node-fetch

MAL-2026-11203

Malicious code in @dexwilt/node-fetch (npm)

fork-angular-daterangepicker

MAL-2026-6255

Malicious code in fork-angular-daterangepicker (npm)

hyperpure-core

MAL-2026-6250

Malicious code in hyperpure-core (npm)

blinkit-core

MAL-2026-6249

Malicious code in blinkit-core (npm)

zomato-sushi

MAL-2026-6254

Malicious code in zomato-sushi (npm)

zomato-logger

MAL-2026-6252

Malicious code in zomato-logger (npm)

zomato-server

MAL-2026-6253

Malicious code in zomato-server (npm)

zomato-config

MAL-2026-6251

Malicious code in zomato-config (npm)

sf-storybook

MAL-2026-6261

Malicious code in sf-storybook (npm)

free-anthropic-claude

MAL-2026-6260

Malicious code in free-anthropic-claude (npm)

atlasora-config

MAL-2026-6239

Malicious code in atlasora-config (npm)

atlasora-shared

MAL-2026-6241

Malicious code in atlasora-shared (npm)

atlasora-api

MAL-2026-6237

Malicious code in atlasora-api (npm)

atlasora-types

MAL-2026-6242

Malicious code in atlasora-types (npm)

atlasora-sdk

MAL-2026-6240

Malicious code in atlasora-sdk (npm)

atlasora-utils

MAL-2026-6243

Malicious code in atlasora-utils (npm)

atlasora-client

MAL-2026-6238

Malicious code in atlasora-client (npm)

@withgoogle/stitch-sdk

MAL-2026-6256

Malicious code in @withgoogle/stitch-sdk (npm)

yian666aikf

MAL-2026-6234

Malicious code in yian666aikf (npm)

Backdoor

yianzzkf6687

MAL-2026-6235

Malicious code in yianzzkf6687 (npm)

Backdoor

free-claude

MAL-2026-6232

Malicious code in free-claude (npm)