Supply Chain Incidents

MAL-2026-6444

Malicious code in agentsync-tool (npm)

MAL-2026-6443

Malicious code in agentsync-pkg (npm)

MAL-2026-6437

Malicious code in logfmt-core (npm)

MAL-2026-6438

Malicious code in polymarket-stake-math (npm)

MAL-2026-6439

Malicious code in polymarket-stake-maths (npm)

MAL-2026-6442

Malicious code in easy-time-format (npm)

MAL-2026-6440

Malicious code in tokenization-util (npm)

MAL-2026-6441

Malicious code in unifydata (npm)

MAL-2026-6415

Malicious code in anthropic-claude-latest (npm)

MAL-2026-6416

Malicious code in block-slot (npm)

MAL-2026-6412

Malicious code in nabisco (npm)

MAL-2026-6408

Malicious code in @su-doughnym/loginui (npm)

MAL-2026-6409

Malicious code in @su-doughnym/metrics-js (npm)

MAL-2026-6413

Malicious code in poc-publish-test-su-doughnym (npm)

MAL-2026-6410

Malicious code in @su-doughnym/react-dlb (npm)

MAL-2026-6411

Malicious code in data-fetching-client (npm)

MAL-2026-6414

Malicious code in two-factor-prompt-lib (npm)

MAL-2026-6407

Malicious code in @su-doughnym/hubspot-loginui-poc (npm)

MAL-2026-6433

Malicious code in rstreams-shard-util (npm)

MAL-2026-6427

Malicious code in leo-connector-redshift (npm)

MAL-2026-6419

Malicious code in leo-cache (npm)

MAL-2026-6432

Malicious code in rstreams-metrics (npm)

MAL-2026-6435

Malicious code in serverless-leo (npm)

MAL-2026-6418

Malicious code in leo-aws (npm)