Supply Chain Incidents

MAL-2026-16483

Malicious code in @rixxcodex/baileys (npm)

pino-testkit

MAL-2026-16484

Malicious code in pino-testkit (npm)

Typosquat

internallib_v657

MAL-2026-16482

Malicious code in internallib_v657 (npm)

Backdoor

internallib_v463

MAL-2026-16481

Malicious code in internallib_v463 (npm)

a-onesite

MAL-2026-16480

Malicious code in a-onesite (npm)

event-hunter

MAL-2026-16478

Malicious code in event-hunter (npm)

Dep Confusion

simplenewnpmpackage

MAL-2026-16479

Malicious code in simplenewnpmpackage (npm)

com.apple.unityplugin.storekit

MAL-2026-16477

Malicious code in com.apple.unityplugin.storekit (npm)

@memtensor/memos-cloud-openclaw-plugin

MAL-2026-16476

Malicious code in @memtensor/memos-cloud-openclaw-plugin (npm)

sea-baileys

MAL-2026-16473

Malicious code in sea-baileys (npm)

vite-dev-launcher

MAL-2026-16474

Malicious code in vite-dev-launcher (npm)

@test1230504/string-format-helper

MAL-2026-16468

Malicious code in @test1230504/string-format-helper (npm)

@test1230504/probe-7f3k2m-utils

MAL-2026-16467

Malicious code in @test1230504/probe-7f3k2m-utils (npm)

@test1230504/test-publish-verify

MAL-2026-16469

Malicious code in @test1230504/test-publish-verify (npm)

z-deno-truth-va499w

MAL-2026-16471

Malicious code in z-deno-truth-va499w (npm)

z-deno-truth-ya1t4m

MAL-2026-16472

Malicious code in z-deno-truth-ya1t4m (npm)

z-deno-truth-bwhlsz

MAL-2026-16470

Malicious code in z-deno-truth-bwhlsz (npm)

hachutis

MAL-2026-16464

Malicious code in hachutis (npm)

helpersutils-dev-tools

MAL-2026-16465

Malicious code in helpersutils-dev-tools (npm)

godxxx

MAL-2026-16461

Malicious code in godxxx (npm)

godzz

MAL-2026-16462

Malicious code in godzz (npm)

godzzz

MAL-2026-16463

Malicious code in godzzz (npm)

better-md

MAL-2026-16446

Malicious code in better-md (npm)

some-tool-package

MAL-2026-16455

Malicious code in some-tool-package (npm)