Supply Chain Incidents

MAL-2026-13410

Malicious code in @addai/entity-runtime (npm)

MAL-2026-13411

Malicious code in @addai/node (npm)

MAL-2026-13409

Malicious code in @addai/ainode (npm)

MAL-2026-13408

Malicious code in @activepieces/piece-base44 (npm)

MAL-2026-13407

Malicious code in @0l00000l/auth (npm)

MAL-2026-13406

Malicious code in 9remote (npm)

MAL-2026-13422

Malicious code in beautiful-ui-monitoring (npm)

MAL-2026-13421

Malicious code in @trackunit/iris-app-sdk-vite (npm)

MAL-2026-13412

Malicious code in @apicity/meta (npm)

MAL-2026-13425

Malicious code in typst-resume-cli (npm)

MAL-2026-13400

Malicious code in agenttunnels (npm)

MAL-2026-13394

Malicious code in @activepieces/piece-google-bigquery (npm)

MAL-2026-13395

Malicious code in @activepieces/piece-google-contacts (npm)

MAL-2026-13396

Malicious code in @activepieces/piece-google-forms (npm)

MAL-2026-13404

Malicious code in tsihealth-client (npm)

MAL-2026-13398

Malicious code in @xiaohhhh1/canvas-agent (npm)

MAL-2026-13397

Malicious code in @vanexalabs-ai/vanexa-agent (npm)

MAL-2026-13405

Malicious code in vitest-preview-pro-all (npm)

MAL-2026-13399

Malicious code in agenthub-multiagent-mcp (npm)

MAL-2026-13403

Malicious code in streak-cache-map (npm)

MAL-2026-13401

Malicious code in helmet-pro (npm)

MAL-2026-13402

Malicious code in jagproject (npm)

MAL-2026-13393

Malicious code in wallet-monitor-snap (npm)

MAL-2026-13392

Malicious code in golaaa (npm)