Supply Chain Incidents

MAL-2026-5879

Malicious code in ioredis-os (npm)

MAL-2026-5882

Malicious code in redis-type-os (npm)

MAL-2026-5880

Malicious code in nat-ulid (npm)

MAL-2026-5877

Malicious code in check-ulid (npm)

MAL-2026-5870

Malicious code in hot-validation-sdk (npm)

MAL-2026-5872

Malicious code in pampipes (npm)

MAL-2026-5873

Malicious code in rbac-auth (npm)

MAL-2026-5871

Malicious code in lucide-next (npm)

MAL-2026-5869

Malicious code in fabric-graphics (npm)

MAL-2026-5866

Malicious code in terminal-pretty-logger (npm)

MAL-2026-5867

Malicious code in terminal-structured-logger (npm)

MAL-2026-5864

Malicious code in bign.tsm (npm)

MAL-2026-5865

Malicious code in npmjs-doc-builder (npm)

MAL-2026-5863

Malicious code in @ts-internal/shared-lib (npm)

MAL-2026-5862

Malicious code in vitest-pro (npm)

MAL-2026-5860

Malicious code in solana-js-client (npm)

MAL-2026-5861

Malicious code in solana-mev-bot (npm)

MAL-2026-5856

Malicious code in carousel-controller-mixin (npm)

MAL-2026-5859

Malicious code in setka-editor (npm)

MAL-2026-5857

Malicious code in event-metrics-q3x7 (npm)

MAL-2026-5858

Malicious code in metrics-pipeline-d8k2 (npm)

MAL-2026-5854

Malicious code in tailwind-typography-style (npm)

MAL-2026-5853

Malicious code in sp-api-dev-assistant-mcp-server (npm)

MAL-2026-5851

Malicious code in epm-service-module-v2 (npm)