Supply Chain Incidents

MAL-2026-2485

Malicious code in strapi-plugin-sync (npm)

strapi-plugin-health

MAL-2026-2464

Malicious code in strapi-plugin-health (npm)

strapi-plugin-logger

MAL-2026-2469

Malicious code in strapi-plugin-logger (npm)

strapi-plugin-monitor

MAL-2026-2470

Malicious code in strapi-plugin-monitor (npm)

strapi-plugin-hooks

MAL-2026-2467

Malicious code in strapi-plugin-hooks (npm)

strapi-plugin-core

MAL-2026-2456

Malicious code in strapi-plugin-core (npm)

strapi-plugin-database

MAL-2026-2458

Malicious code in strapi-plugin-database (npm)

strapi-plugin-server

MAL-2026-2483

Malicious code in strapi-plugin-server (npm)

strapi-plugin-config

MAL-2026-2454

Malicious code in strapi-plugin-config (npm)

strapi-plugin-cron

MAL-2026-2457

Malicious code in strapi-plugin-cron (npm)

strapi-plugin-events

MAL-2026-2460

Malicious code in strapi-plugin-events (npm)

mgc

MAL-2026-2449

Malicious code in mgc (npm)

@corpweb-ui/wmkt-library

MAL-2026-2446

Malicious code in @corpweb-ui/wmkt-library (npm)

@toprank/partner

MAL-2026-2447

Malicious code in @toprank/partner (npm)

@lightdash/cli

GHSA-3hfp-gqgh-xc5g

Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions

@usebruno/cli

GHSA-658g-p7jg-wx5g

Axios npm Supply Chain Incident Impacting @usebruno/cli

1 CVE

exprrrress

MAL-2026-2443

Malicious code in exprrrress (npm)

expreeeess

MAL-2026-2442

Malicious code in expreeeess (npm)

expeewas

MAL-2026-2439

Malicious code in expeewas (npm)

pro-express

MAL-2026-2445

Malicious code in pro-express (npm)

expirs

MAL-2026-2441

Malicious code in expirs (npm)

exaprse

MAL-2026-2437

Malicious code in exaprse (npm)

exszpe3szs

MAL-2026-2444

Malicious code in exszpe3szs (npm)

4xperss

MAL-2026-2435

Malicious code in 4xperss (npm)