Supply Chain Incidents

MAL-2026-11113

Malicious code in @wagni_bot/opensea (npm)

MAL-2026-7024

Malicious code in none123s (npm)

MAL-2026-7022

Malicious code in tslint-conf (npm)

MAL-2026-7021

Malicious code in @vite-js/ui (npm)

MAL-2026-7017

Malicious code in logger-daemon-regex (npm)

MAL-2026-7018

Malicious code in n8n-nodes-barcode-generator (npm)

MAL-2026-7020

Malicious code in react-v17 (npm)

MAL-2026-7019

Malicious code in npm-rce-poc (npm)

MAL-2026-7016

Malicious code in @vraksha/gh-helper (npm)

MAL-2026-7010

Malicious code in crypto-promiser (npm)

MAL-2026-7014

Malicious code in vps-new-manager (npm)

MAL-2026-7011

Malicious code in events-alias (npm)

MAL-2026-7008

Malicious code in chai-as-const (npm)

MAL-2026-7009

Malicious code in configration (npm)

MAL-2026-7013

Malicious code in next-locomotive-init (npm)

MAL-2026-7012

Malicious code in express-mongo-limit (npm)

MAL-2026-6988

Malicious code in @vite-tab/tab (npm)

MAL-2026-6999

Malicious code in luludawang-kit (npm)

MAL-2026-6996

Malicious code in ec-checker (npm)

MAL-2026-6995

Malicious code in chai-redirection (npm)

MAL-2026-6994

Malicious code in chai-presentation (npm)

MAL-2026-6991

Malicious code in airkey-mfa-react (npm)

MAL-2026-7000

Malicious code in pipo-sdk (npm)

MAL-2026-6997

Malicious code in goofy-sdk (npm)