Supply Chain Incidents

MAL-2026-5385

Malicious code in @0xlr/clerk-auth (npm)

MAL-2026-5386

Malicious code in @0xlr/prisma-client-js (npm)

MAL-2026-5391

Malicious code in @0xlr/vercel-analytics (npm)

MAL-2026-5389

Malicious code in @0xlr/stripe-frontend (npm)

MAL-2026-5388

Malicious code in @0xlr/stripe-checkout-js (npm)

MAL-2026-5406

Malicious code in ui-weave (npm)

MAL-2026-5390

Malicious code in @0xlr/supabase-db (npm)

MAL-2026-5399

Malicious code in kraken-ui (npm)

MAL-2026-5393

Malicious code in @sflyinc-knapsack/shutterfly-react (npm)

MAL-2026-5392

Malicious code in @open-banking/cabinet-providers (npm)

MAL-2026-5401

Malicious code in savant-listing (npm)

MAL-2026-5402

Malicious code in screenpipe-mcp-http (npm)

MAL-2026-5400

Malicious code in multica (npm)

MAL-2026-5397

Malicious code in create-docs-mcp (npm)

MAL-2026-5403

Malicious code in t-invest-mcp-server (npm)

MAL-2026-5396

Malicious code in @sqlite-node/createsql (npm)

MAL-2026-5394

Malicious code in @sql-access/nodesql (npm)

MAL-2026-5398

Malicious code in hey-base32 (npm)

MAL-2026-5395

Malicious code in @sql-trigger/nodesql (npm)

MAL-2026-5384

Malicious code in enquriers (npm)

MAL-2026-5382

Malicious code in @doaction/types (npm)

MAL-2026-5383

Malicious code in @doaction/wasm-loader (npm)

MAL-2026-5380

Malicious code in @doaction/sudo-prompt (npm)

MAL-2026-5373

Malicious code in @doaction/http (npm)