Supply Chain Incidents

MAL-2026-6366

Malicious code in backpack-ios (npm)

MAL-2026-6371

Malicious code in llm-traces-app (npm)

MAL-2026-6373

Malicious code in twilio-voice-js-reference-components (npm)

MAL-2026-6364

Malicious code in openllmapi (npm)

MAL-2026-6362

Malicious code in monty-data (npm)

MAL-2026-6363

Malicious code in npmkekw (npm)

MAL-2026-6360

Malicious code in tailwind-textform-fill (npm)

MAL-2026-6359

Malicious code in html-to-gutenberg (npm)

MAL-2026-6358

Malicious code in fetch-page-assets (npm)

MAL-2026-6361

Malicious code in vscode-test-web (npm)

MAL-2026-6351

Malicious code in delta-time-32bb (npm)

MAL-2026-6354

Malicious code in npm-bug-bounty-test1-rhyselsmore (npm)

MAL-2026-6355

Malicious code in ppt-creator (npm)

MAL-2026-6349

Malicious code in bug-monorepo (npm)

MAL-2026-6357

Malicious code in theme-color-picker (npm)

MAL-2026-6350

Malicious code in chai-as-operated (npm)

MAL-2026-6353

Malicious code in markdownlint-cli2-fix (npm)

MAL-2026-6348

Malicious code in buffer-wrap-67d7 (npm)

MAL-2026-6352

Malicious code in hex-conv-ae7a (npm)

MAL-2026-6356

Malicious code in safe-json-38bd (npm)

MAL-2026-6347

Malicious code in wagmi_util (npm)

MAL-2026-6338

Malicious code in log-taker (npm)

MAL-2026-6341

Malicious code in react-check-error (npm)

MAL-2026-6346

Malicious code in triage-bot (npm)