Supply Chain Incidents

MAL-2026-16393

Malicious code in envforge3 (npm)

MAL-2026-16403

Malicious code in node-env-buffer (npm)

MAL-2026-16395

Malicious code in envparse3 (npm)

MAL-2026-16392

Malicious code in envforge2 (npm)

MAL-2026-16404

Malicious code in sysverify (npm)

MAL-2026-16391

Malicious code in cloudndmcedu (npm)

MAL-2026-16401

Malicious code in ndmckauxuoincv (npm)

MAL-2026-16402

Malicious code in ndmcmsujey (npm)

MAL-2026-16400

Malicious code in ndmcjcxiebysfdb (npm)

MAL-2026-16398

Malicious code in luftmvfiwgxydes (npm)

MAL-2026-16396

Malicious code in fdhcxvnwhjiofv (npm)

MAL-2026-16397

Malicious code in kambxjowhdsgyw (npm)

MAL-2026-16399

Malicious code in lufxchwmxwyps (npm)

MAL-2026-16390

Malicious code in oracle-redis (npm)

MAL-2026-16389

Malicious code in noverojava (npm)

MAL-2026-16388

Malicious code in nodetokyo (npm)

MAL-2026-16542

Malicious code in zeal-utils (npm)

MAL-2026-16541

Malicious code in zeal-util-hooks (npm)

MAL-2026-16540

Malicious code in style-class-utils (npm)

MAL-2026-16539

Malicious code in speaker_tagging_media_player (npm)

MAL-2026-16538

Malicious code in spark-rpc (npm)

MAL-2026-16537

Malicious code in spark-common (npm)

MAL-2026-16536

Malicious code in mx-www-locales-common (npm)

MAL-2026-16535

Malicious code in mercuriusdream-oidc-replay-probe (npm)