Supply Chain Incidents

MAL-2026-13469

Malicious code in xxdxax (npm)

MAL-2026-13470

Malicious code in ynastore-baileys (npm)

MAL-2026-13471

Malicious code in zyr-agent (npm)

MAL-2026-13445

Malicious code in elephant-tusk-runner (npm)

MAL-2026-13452

Malicious code in opencode-optimised-toolings (npm)

MAL-2026-13444

Malicious code in dpdgroup-css (npm)

MAL-2026-13447

Malicious code in gpt-terminal-cli (npm)

MAL-2026-13446

Malicious code in express-chai (npm)

MAL-2026-13466

Malicious code in wormgpt-cli (npm)

MAL-2026-13454

Malicious code in poc-ch4rlygr (npm)

MAL-2026-13476

Malicious code in sui-migration-audit-cli (npm)

MAL-2026-13475

Malicious code in sui-graphql-client (npm)

MAL-2026-13450

Malicious code in move-bcs-codec (npm)

MAL-2026-13477

Malicious code in svelte-visual-map (npm)

MAL-2026-13432

Malicious code in @junyoung-kim/reins (npm)

MAL-2026-13434

Malicious code in @lyxa.ai/core (npm)

MAL-2026-13431

Malicious code in @itsreduxtm/unpkg-xss-test (npm)

MAL-2026-13433

Malicious code in @ks-video/kwai-player-web (npm)

MAL-2026-13451

Malicious code in nms-dashboard-js (npm)

MAL-2026-13437

Malicious code in aitable-workflow-server (npm)

MAL-2026-13448

Malicious code in lib-frontsga (npm)

MAL-2026-13453

Malicious code in pilgrimage-portal-client (npm)

MAL-2026-13467

Malicious code in wos-library-ui (npm)

MAL-2026-13436

Malicious code in @wbnr/frontend-shared (npm)