Supply Chain Incidents

MAL-2026-5308

Malicious code in nodemon-copack (npm)

MAL-2026-5306

Malicious code in chai-mocks (npm)

MAL-2026-5366

Malicious code in zer0one-dnslog (npm)

MAL-2026-5343

Malicious code in progerss-cli (npm)

MAL-2026-5342

Malicious code in kecak256 (npm)

MAL-2026-5297

Malicious code in consumerweb-authflow (npm)

MAL-2026-5291

Malicious code in sequoia-engineering (npm)

MAL-2026-5363

Malicious code in @solana-labs/web3-js (npm)

MAL-2026-5362

Malicious code in @solana-labs/etherjs (npm)

MAL-2026-5289

Malicious code in unifi-portal (npm)

MAL-2026-5286

Malicious code in encrypted-archive (npm)

MAL-2026-5288

Malicious code in uisp-connector (npm)

MAL-2026-5287

Malicious code in uhd-setup (npm)

MAL-2026-5270

Malicious code in reactvora (npm)

MAL-2026-5269

Malicious code in glyphr (npm)

MAL-2026-5268

Malicious code in ulid-os (npm)

MAL-2026-5239

Malicious code in awaitly-visualizer (npm)

MAL-2026-5230

Malicious code in autotel-subscribers (npm)

MAL-2026-5207

Malicious code in @forjacms/sections (npm)

MAL-2026-5223

Malicious code in autotel-mcp (npm)

MAL-2026-5253

Malicious code in executable-stories-init (npm)

MAL-2026-5264

Malicious code in node-env-resolver-dotenvx (npm)

MAL-2026-5265

Malicious code in node-env-resolver-nextjs (npm)

MAL-2026-5248

Malicious code in eslint-plugin-executable-stories-playwright (npm)