Supply Chain Incidents

MAL-2026-6376

Malicious code in bn-lint (npm)

MAL-2026-6374

Malicious code in evil-pkg (npm)

MAL-2026-6375

Malicious code in gpt-chat-cli (npm)

MAL-2026-6369

Malicious code in hardhat-test-log (npm)

MAL-2026-6367

Malicious code in dbt-language-server (npm)

MAL-2026-6370

Malicious code in hyperpure (npm)

MAL-2026-6368

Malicious code in decimal-format-utils (npm)

MAL-2026-6372

Malicious code in rollup-runtime-polyfill-core (npm)

MAL-2026-6365

Malicious code in assertcore (npm)

MAL-2026-6366

Malicious code in backpack-ios (npm)

MAL-2026-6371

Malicious code in llm-traces-app (npm)

MAL-2026-6373

Malicious code in twilio-voice-js-reference-components (npm)

MAL-2026-6364

Malicious code in openllmapi (npm)

MAL-2026-6362

Malicious code in monty-data (npm)

MAL-2026-6363

Malicious code in npmkekw (npm)

MAL-2026-6360

Malicious code in tailwind-textform-fill (npm)

MAL-2026-6359

Malicious code in html-to-gutenberg (npm)

MAL-2026-6358

Malicious code in fetch-page-assets (npm)

MAL-2026-6361

Malicious code in vscode-test-web (npm)

MAL-2026-6351

Malicious code in delta-time-32bb (npm)

MAL-2026-6354

Malicious code in npm-bug-bounty-test1-rhyselsmore (npm)

MAL-2026-6355

Malicious code in ppt-creator (npm)

MAL-2026-6349

Malicious code in bug-monorepo (npm)

MAL-2026-6357

Malicious code in theme-color-picker (npm)