Supply Chain Incidents

MAL-2026-13391

Malicious code in @zahlen/checkout (npm)

MAL-2026-13389

Malicious code in @voxepay/checkout (npm)

MAL-2026-13387

Malicious code in @afasinatickets/common (npm)

MAL-2026-13388

Malicious code in @simplipayng/checkout (npm)

MAL-2026-13390

Malicious code in @xsat10/baileys-xsat (npm)

MAL-2026-13435

Malicious code in @united-airlines-org/atmos-design-system (npm)

MAL-2026-13383

Malicious code in svelte-mapped-metrics (npm)

MAL-2026-13384

Malicious code in svelte-mapping-core (npm)

MAL-2026-13374

Malicious code in @chnayser/server (npm)

MAL-2026-13376

Malicious code in claude-remote-agent (npm)

MAL-2026-13377

Malicious code in ezdiscordbots (npm)

MAL-2026-13378

Malicious code in npm-dc-dev (npm)

MAL-2026-13375

Malicious code in app-api-sdk (npm)

MAL-2026-13379

Malicious code in statist-browser-typed-client-sme.rko.tariffs.web (npm)

MAL-2026-13370

Malicious code in llm-interceptor (npm)

MAL-2026-13369

Malicious code in kepler (npm)

MAL-2026-13371

Malicious code in multi-acct (npm)

MAL-2026-13368

Malicious code in express-dever (npm)

MAL-2026-13363

Malicious code in @cliphijack/santaclaude (npm)

MAL-2026-13364

Malicious code in @ikbal_fadilah_vanexa01/vanexa-agent (npm)

MAL-2026-13365

Malicious code in @stageflight-testbed/a (npm)

MAL-2026-13367

Malicious code in clawtrl-wallet (npm)

MAL-2026-13366

Malicious code in @workoscalif/sudoku (npm)

MAL-2026-13360

Malicious code in uzair-rajput-new (npm)