Supply Chain Incidents

MAL-2026-4405

Malicious code in @lokuma/cli (npm)

MAL-2026-4229

Malicious code in @luke-101141/nobody (npm)

MAL-2026-4584

Malicious code in ihubinternal (npm)

MAL-2026-4222

Malicious code in chai-as-afforded (npm)

MAL-2026-4618

Malicious code in n8n-nodes-whatsapp-business-api-by-automations-builder (npm)

MAL-2026-4738

Malicious code in zest-product (npm)

MAL-2026-4492

Malicious code in autoheal-dev-cli (npm)

MAL-2026-4620

Malicious code in nikou-node (npm)

MAL-2026-4515

Malicious code in chai-val (npm)

MAL-2026-4564

Malicious code in finup-mongo-library (npm)

MAL-2026-4399

Malicious code in @kedem/okdb (npm)

MAL-2026-4366

Malicious code in @autoheal/setup (npm)

MAL-2026-4635

Malicious code in payment-account-input-selector (npm)

MAL-2026-4442

Malicious code in @shadowmd/libsignal-node (npm)

MAL-2026-4392

Malicious code in @hanssoft/baileys (npm)

MAL-2026-4580

Malicious code in http-uploader-dev (npm)

MAL-2026-4393

Malicious code in @hanssoft/libsignal-node (npm)

MAL-2026-4588

Malicious code in ionic-insta-api-wrapper (npm)

MAL-2026-4361

Malicious code in @amswf/huoke (npm)

MAL-2026-4373

Malicious code in @budetzz/libsignal-node (npm)

MAL-2026-4625

Malicious code in oh-langfuse (npm)

MAL-2026-4228

Malicious code in @tiledesk/tiledesk-server (npm)

MAL-2026-4458

Malicious code in @toni77777/aora (npm)

MAL-2026-4696

Malicious code in turing-sdk (npm)