Supply Chain Incidents

MAL-2026-5697

Malicious code in web-model-bridge (npm)

MAL-2026-5690

Malicious code in ecto-spectral-leak-8d4e2 (npm)

MAL-2026-5693

Malicious code in sea-bound-siren (npm)

MAL-2026-5691

Malicious code in ecto-spirit-win-k4n8 (npm)

MAL-2026-5686

Malicious code in ecto-corsair-flag-x9m4 (npm)

MAL-2026-5685

Malicious code in @malwguy/ecto-corsair-whisper-3d2a7c (npm)

MAL-2026-5687

Malicious code in ecto-flag-read-m7p2 (npm)

MAL-2026-5688

Malicious code in ecto-nightly-spirit (npm)

MAL-2026-5689

Malicious code in ecto-rust-read-f3a9c1 (npm)

MAL-2026-5692

Malicious code in ecto-win-flag-q2m7 (npm)

MAL-2026-5682

Malicious code in coral-wraith (npm)

MAL-2026-5678

Malicious code in internallib_v557 (npm)

MAL-2026-5677

Malicious code in worker-build (npm)

MAL-2026-5674

Malicious code in @johntaohunter/forge-jsx (npm)

MAL-2026-5676

Malicious code in ioredis-typed (npm)

MAL-2026-5675

Malicious code in ioredis-orm (npm)

MAL-2026-5672

Malicious code in vqlxjmpr (npm)

MAL-2026-5673

Malicious code in zatzdbai (npm)

MAL-2026-5666

Malicious code in downlynpm (npm)

MAL-2026-5656

Malicious code in @integrations-center/utils (npm)

MAL-2026-5661

Malicious code in @sazka/web (npm)

MAL-2026-5663

Malicious code in @tenforce/toolbox-fontmap (npm)

MAL-2026-5659

Malicious code in @ngt-frontend/widgets-core (npm)

MAL-2026-5658

Malicious code in @marketplace-shared/components (npm)