Supply Chain Incidents

MAL-2026-17233

Malicious code in hardhat-lock (npm)

MAL-2026-17236

Malicious code in mini-hardhat (npm)

MAL-2026-17237

Malicious code in native-env (npm)

MAL-2026-17231

Malicious code in dotenv-native (npm)

MAL-2026-17232

Malicious code in fabric-native-loader (npm)

MAL-2026-17235

Malicious code in items-validator (npm)

MAL-2026-17239

Malicious code in test-agency-assignment (npm)

MAL-2026-17230

Malicious code in llm-nebula (npm)

MAL-2026-17229

Malicious code in simple-date-formatter-new-12 (npm)

MAL-2026-17228

Malicious code in nebulaai-sdk (npm)

MAL-2026-17226

Malicious code in figlet-chalk-render (npm)

MAL-2026-17223

Malicious code in chalk-figlet (npm)

MAL-2026-17227

Malicious code in nebula-llm (npm)

MAL-2026-17224

Malicious code in fabric-asset-pipeline (npm)

MAL-2026-17225

Malicious code in fabric-render-bridge (npm)

MAL-2026-17216

Malicious code in img-to-native (npm)

MAL-2026-17218

Malicious code in native-runner (npm)

MAL-2026-17220

Malicious code in nebulajs-api (npm)

MAL-2026-17219

Malicious code in nebula-sdk (npm)

MAL-2026-17222

Malicious code in vite-plugin-crypto (npm)

MAL-2026-17221

Malicious code in tailwindcss-form-kit (npm)

MAL-2026-17217

Malicious code in my-skibidi (npm)

MAL-2026-17215

Malicious code in eslint-plugin-skywagon-web (npm)

MAL-2026-17214

Malicious code in git-en-boite-logging (npm)