Supply Chain Incidents

MAL-2026-2507

Malicious code in @fairwords/loopback-connector-es (npm)

MAL-2026-2508

Malicious code in @fairwords/websocket (npm)

MAL-2026-2865

Malicious code in @sie-ppr-web-checkout/app (npm)

MAL-2026-2510

Malicious code in @velora-dex/sdk (npm)

MAL-2026-2504

Malicious code in strapi-plugin-cache (npm)

MAL-2026-2505

Malicious code in @aspect-security/argon2 (npm)

MAL-2026-2511

Malicious code in argon2-napi (npm)

MAL-2026-2509

Malicious code in @langgraphjs/toolkit (npm)

MAL-2026-2871

Malicious code in devkitx (npm)

MAL-2026-2525

Malicious code in frontend-backoffice (npm)

MAL-2026-2529

Malicious code in use-form-builder-plugin (npm)

MAL-2026-2524

Malicious code in a2a-chat-canvas (npm)

MAL-2026-2526

Malicious code in request-js-validator (npm)

MAL-2026-2499

Malicious code in nerite-security-audit (npm)

MAL-2026-2500

Malicious code in totally-safe-util (npm)

MAL-2026-2498

Malicious code in df-sandbox-test (npm)

MAL-2026-2497

Malicious code in commerce-utils (npm)

MAL-2026-2496

Malicious code in chess-sec-ssrf1 (npm)

MAL-2026-2495

Malicious code in cloudera (npm)

MAL-2026-2493

Malicious code in cloudera-poc (npm)

MAL-2026-2492

Malicious code in admin0911 (npm)

MAL-2026-2491

Malicious code in @not-nemo/crypto-tracker (npm)

MAL-2026-2716

Malicious code in @needl-ai/common (npm)

MAL-2026-2452

Malicious code in strapi-plugin-blurhash (npm)