Supply Chain Incidents

MAL-2026-13614

Malicious code in aclade-agent (npm)

MAL-2026-13618

Malicious code in w-screenctl (npm)

MAL-2026-13615

Malicious code in agenthub-ai (npm)

MAL-2026-13617

Malicious code in ts-utility-plus (npm)

MAL-2026-13616

Malicious code in hardhat-cap (npm)

MAL-2026-13613

Malicious code in big-tss (npm)

MAL-2026-13611

Malicious code in mangomind-agent (npm)

MAL-2026-13612

Malicious code in transform-es2015-unicode-regex (npm)

MAL-2026-13610

Malicious code in f-termx (npm)

MAL-2026-13609

Malicious code in hardhat-set (npm)

MAL-2026-13608

Malicious code in @vertexa/prisma-fetch-engine (npm)

MAL-2026-13605

Malicious code in yakuza0 (npm)

MAL-2026-13520

Malicious code in @aster110/cc2wechat (npm)

MAL-2026-13549

Malicious code in dojo-rn-interview (npm)

MAL-2026-13522

Malicious code in base-ui-cli (npm)

MAL-2026-13539

Malicious code in delivery-ci-codeceptjs (npm)

MAL-2026-13574

Malicious code in dolyame-ui-inputautocomplete (npm)

MAL-2026-13547

Malicious code in devplatform-spa-plugin-remote-module (npm)

MAL-2026-13557

Malicious code in dolyame-ui-checkablegroup (npm)

MAL-2026-13577

Malicious code in dolyame-ui-inputdate (npm)

MAL-2026-13542

Malicious code in delivery-ci-jira (npm)

MAL-2026-13552

Malicious code in dolyame-boxy-independent-bnpl-main-title (npm)

MAL-2026-13596

Malicious code in dolyame-ui-progressline (npm)

MAL-2026-13583

Malicious code in dolyame-ui-inputsearchtagged (npm)