Supply Chain Incidents

MAL-2026-5898

Malicious code in strict-engine-peer (npm)

MAL-2026-5896

Malicious code in jest-test-plugin-utils (npm)

MAL-2026-5897

Malicious code in noderzero (npm)

MAL-2026-5894

Malicious code in create-vercel-integration (npm)

MAL-2026-5890

Malicious code in @dsft/ft-utils (npm)

MAL-2026-5889

Malicious code in @dsft/ft-element (npm)

MAL-2026-5899

Malicious code in stripe-cli-init-plugin (npm)

MAL-2026-5887

Malicious code in conducts (npm)

MAL-2026-5891

Malicious code in atlassian-forge-skills (npm)

MAL-2026-5893

Malicious code in claude-jar (npm)

MAL-2026-5886

Malicious code in @vantuz/sdk-core (npm)

MAL-2026-5888

Malicious code in middleware-jwt (npm)

MAL-2026-5884

Malicious code in vortnode (npm)

MAL-2026-5885

Malicious code in wordpad-text-ui (npm)

MAL-2026-5881

Malicious code in obfus-jsxy (npm)

MAL-2026-5883

Malicious code in redis-xyz (npm)

MAL-2026-5879

Malicious code in ioredis-os (npm)

MAL-2026-5882

Malicious code in redis-type-os (npm)

MAL-2026-5880

Malicious code in nat-ulid (npm)

MAL-2026-5877

Malicious code in check-ulid (npm)

MAL-2026-5870

Malicious code in hot-validation-sdk (npm)

MAL-2026-5871

Malicious code in lucide-next (npm)

MAL-2026-5873

Malicious code in rbac-auth (npm)

MAL-2026-5872

Malicious code in pampipes (npm)