Supply Chain Incidents

MAL-2026-6158

Malicious code in enzyme-optimization-bluetooth (npm)

MAL-2026-6179

Malicious code in touchid-images (npm)

MAL-2026-6147

Malicious code in analytics-readability-gestures (npm)

MAL-2026-6175

Malicious code in request-performance (npm)

MAL-2026-6148

Malicious code in async-protobuf-av (npm)

MAL-2026-6151

Malicious code in buildautomation-touch (npm)

MAL-2026-6177

Malicious code in socket-network (npm)

MAL-2026-6155

Malicious code in designsystem-vector (npm)

MAL-2026-6171

Malicious code in personal-custom-button (npm)

MAL-2026-6178

Malicious code in streaming-downloads (npm)

MAL-2026-6165

Malicious code in ios-save-area-custom (npm)

MAL-2026-6152

Malicious code in custom-save-area-block (npm)

MAL-2026-6160

Malicious code in firebase-readability (npm)

MAL-2026-6174

Malicious code in pushnotifications-gesturerecognition (npm)

MAL-2026-6163

Malicious code in framerate-interaction-permissions (npm)

MAL-2026-6159

Malicious code in expandingcards-socket-virtualization (npm)

MAL-2026-6145

Malicious code in accordion-animationtiming-authorization (npm)

MAL-2026-6055

Malicious code in @mastra/node-speaker (npm)

MAL-2026-6057

Malicious code in @mastra/voice-playai (npm)

MAL-2026-6052

Malicious code in @mastra/github-signals (npm)

MAL-2026-6053

Malicious code in @mastra/mem0 (npm)

MAL-2026-6054

Malicious code in @mastra/node-audio (npm)

MAL-2026-6056

Malicious code in @mastra/react (npm)

MAL-2026-11205

Malicious code in redis-type-xyz (npm)