Supply Chain Incidents

MAL-2026-6679

Malicious code in agent-starter-pack (npm)

MAL-2026-6682

Malicious code in confluent-kafka-javascript (npm)

MAL-2026-6686

Malicious code in setup-cicd (npm)

MAL-2026-6684

Malicious code in postcss-property-rollup (npm)

MAL-2026-6683

Malicious code in nbmolviz-js (npm)

MAL-2026-6678

Malicious code in ts-linting-builder (npm)

MAL-2026-6677

Malicious code in ts-lint-builders-v2.1 (npm)

MAL-2026-6675

Malicious code in rs-biginteger (npm)

MAL-2026-6676

Malicious code in terminal-prettier (npm)

MAL-2026-6702

Malicious code in vue-demi-fix (npm)

MAL-2026-6674

Malicious code in ripshakti1 (npm)

MAL-2026-6673

Malicious code in anthropic-toolkit (npm)

MAL-2026-6694

Malicious code in thirdwebb (npm)

MAL-2026-6689

Malicious code in decimal-format-core (npm)

MAL-2026-6693

Malicious code in thirdwb (npm)

MAL-2026-6695

Malicious code in ts-bn-proto (npm)

MAL-2026-6692

Malicious code in polymarket-trading-developer-tools (npm)

MAL-2026-6691

Malicious code in polymarket-clob-maths (npm)

MAL-2026-6688

Malicious code in console-fmt-cli (npm)

MAL-2026-6690

Malicious code in log-taker1 (npm)

MAL-2026-6652

Malicious code in @webda-infra-ui/static-images (npm)

MAL-2026-6603

Malicious code in @bc-workspace/utils (npm)

MAL-2026-6610

Malicious code in @cseo-hr/trpweb-shared (npm)

MAL-2026-6615

Malicious code in @digitalpharmacist/http-error-util (npm)