Supply Chain Incidents

MAL-2026-6495

Malicious code in animatecss-postcss-plugin (npm)

@help-forms/application-aff

MAL-2026-6494

Malicious code in @help-forms/application-aff (npm)

data-parser-utils

MAL-2026-6490

Malicious code in data-parser-utils (npm)

prism-silq

MAL-2026-6493

Malicious code in prism-silq (npm)

hexo-shoka-swiper

MAL-2026-6492

Malicious code in hexo-shoka-swiper (npm)

hexo-deployer-wrangler

MAL-2026-6491

Malicious code in hexo-deployer-wrangler (npm)

random-string-64

MAL-2026-6484

Malicious code in random-string-64 (npm)

kelly-stake

MAL-2026-6482

Malicious code in kelly-stake (npm)

gx-npm-lib

MAL-2026-6480

Malicious code in gx-npm-lib (npm)

gx-npm-ui

MAL-2026-6481

Malicious code in gx-npm-ui (npm)

velocityfix

MAL-2026-6487

Malicious code in velocityfix (npm)

log-update-ts

MAL-2026-6483

Malicious code in log-update-ts (npm)

@salem_jalal/osc-components

MAL-2026-6479

Malicious code in @salem_jalal/osc-components (npm)

unsafe-malicious-package

MAL-2026-6486

Malicious code in unsafe-malicious-package (npm)

starship-timeline

MAL-2026-6485

Malicious code in starship-timeline (npm)

runtimekit

MAL-2026-6477

Malicious code in runtimekit (npm)

ref-slot

MAL-2026-6474

Malicious code in ref-slot (npm)

Backdoor

typedecode

MAL-2026-6476

Malicious code in typedecode (npm)

textshape-css

MAL-2026-6475

Malicious code in textshape-css (npm)

Typosquat

colorpicker-ui

MAL-2026-6473

Malicious code in colorpicker-ui (npm)

tailwind-color-shades

MAL-2026-6471

Malicious code in tailwind-color-shades (npm)

tailwindcss-effector

MAL-2026-6472

Malicious code in tailwindcss-effector (npm)

Typosquat

chlklib

MAL-2026-6470

Malicious code in chlklib (npm)

Typosquat

ts-precision

MAL-2026-6469

Malicious code in ts-precision (npm)