Supply Chain Incidents

MAL-2026-4230

Malicious code in cryptoco-auth (npm)

MAL-2026-4429

Malicious code in @rui.branco/sentry-mcp (npm)

MAL-2026-4664

Malicious code in search-connector-template (npm)

MAL-2026-4535

Malicious code in configcat-trello-powerup (npm)

MAL-2026-4424

Malicious code in @remitee-money-transfer/rmt-base (npm)

MAL-2026-4530

Malicious code in cloudsmith-vsc (npm)

MAL-2026-4416

Malicious code in @ornexus/neocortex (npm)

MAL-2026-4565

Malicious code in fnd-stores (npm)

MAL-2026-4650

Malicious code in pubnub-moderation-tool (npm)

MAL-2026-4614

Malicious code in moneykit-cardano-demo (npm)

MAL-2026-4514

Malicious code in chai-as-vite (npm)

MAL-2026-4402

Malicious code in @kyungseopk1m/holidays-kr (npm)

MAL-2026-4607

Malicious code in maxixy-cli (npm)

MAL-2026-4513

Malicious code in chai-as-tuned (npm)

MAL-2026-4421

Malicious code in @pulse-web-platform-core/scripts-loader (npm)

MAL-2026-4703

Malicious code in veteran (npm)

MAL-2026-4226

Malicious code in tailwindcss-themers (npm)

MAL-2026-4225

Malicious code in tailwindcss-theme-custom (npm)

MAL-2026-4509

Malicious code in celonix-otp-react (npm)

MAL-2026-4224

Malicious code in json-spectaculation (npm)

MAL-2026-4704

Malicious code in veteran-proxy (npm)

MAL-2026-4699

Malicious code in utils-mf (npm)

MAL-2026-4380

Malicious code in @dekuzxc/nexca (npm)

MAL-2026-4462

Malicious code in @vino.tian/vibe-kanban (npm)