Supply Chain Incidents

MAL-2026-2705

Malicious code in @3stripes/core (npm)

MAL-2026-2703

Malicious code in @3stripes/components (npm)

MAL-2026-2907

Malicious code in nj-logger (npm)

MAL-2026-2913

Malicious code in vite-plugin-compress-plus (npm)

MAL-2026-2908

Malicious code in pretty-logger-js (npm)

MAL-2026-2911

Malicious code in terminal-formatter (npm)

MAL-2026-2910

Malicious code in tailwindthml-flips (npm)

MAL-2026-2912

Malicious code in trgrip (npm)

MAL-2026-2909

Malicious code in tailwind-typography-cssstyle (npm)

MAL-2026-2905

Malicious code in simple-auth-basic (npm)

MAL-2026-2906

Malicious code in swplayer-react-sl (npm)

MAL-2026-2900

Malicious code in dotenv-pack (npm)

MAL-2026-2894

Malicious code in chai-as-nobj (npm)

MAL-2026-2901

Malicious code in env_express (npm)

MAL-2026-2902

Malicious code in lockedin-chai-chain (npm)

MAL-2026-2888

Malicious code in chai-as-encrypted (npm)

MAL-2026-2886

Malicious code in chai-as-chain-v2 (npm)

MAL-2026-2887

Malicious code in chai-as-elevated (npm)

MAL-2026-2904

Malicious code in trackora-node (npm)

MAL-2026-2889

Malicious code in chai-as-evm (npm)

MAL-2026-2892

Malicious code in chai-as-inserted (npm)

MAL-2026-2903

Malicious code in trackora-chain (npm)

MAL-2026-2896

Malicious code in chai-as-stream (npm)

MAL-2026-2893

Malicious code in chai-as-mobj (npm)