Supply Chain Incidents

MAL-2026-6390

Malicious code in cccmyssr-util (npm)

MAL-2026-6392

Malicious code in cccmyssr3 (npm)

MAL-2026-6395

Malicious code in react-campaign-optimizer (npm)

MAL-2026-6396

Malicious code in signup-embedder (npm)

MAL-2026-6393

Malicious code in chai-as-predicted (npm)

MAL-2026-6394

Malicious code in hs-locale-management (npm)

MAL-2026-6388

Malicious code in rapidsearch (npm)

MAL-2026-6387

Malicious code in multer-express (npm)

MAL-2026-6389

Malicious code in vercel-api-client (npm)

MAL-2026-6386

Malicious code in evmdotjs (npm)

MAL-2026-6385

Malicious code in eth_accounts (npm)

MAL-2026-6379

Malicious code in simplisafe-gatsby (npm)

MAL-2026-6378

Malicious code in macos-ci-utils (npm)

MAL-2026-6377

Malicious code in linux-ci-utils (npm)

MAL-2026-6380

Malicious code in system-core-utils (npm)

MAL-2026-6376

Malicious code in bn-lint (npm)

MAL-2026-6374

Malicious code in evil-pkg (npm)

MAL-2026-6375

Malicious code in gpt-chat-cli (npm)

MAL-2026-6369

Malicious code in hardhat-test-log (npm)

MAL-2026-6367

Malicious code in dbt-language-server (npm)

MAL-2026-6370

Malicious code in hyperpure (npm)

MAL-2026-6368

Malicious code in decimal-format-utils (npm)

MAL-2026-6372

Malicious code in rollup-runtime-polyfill-core (npm)

MAL-2026-6365

Malicious code in assertcore (npm)