Supply Chain Incidents

MAL-2026-2189

Malicious code in simple-util-kit (npm)

MAL-2026-2166

Malicious code in @shennmine/baileys (npm)

MAL-2026-2167

Malicious code in @shennmine/libsignal-node (npm)

MAL-2026-2197

Malicious code in allergan (npm)

MAL-2026-2169

Malicious code in console-loggers (npm)

MAL-2026-2168

Malicious code in chai-patch (npm)

MAL-2026-2163

Malicious code in @rexxtheproject/elaina-baileys (npm)

MAL-2026-2164

Malicious code in @rexxtheproject/elaina-libsignal (npm)

MAL-2026-2165

Malicious code in @rexxtheproject/keyed-db (npm)

MAL-2026-2160

Malicious code in chai-as-chain (npm)

MAL-2026-2161

Malicious code in path-external (npm)

MAL-2026-2159

Malicious code in @eric-orderbuddyinfo/react-noval (npm)

MAL-2026-2162

Malicious code in svg-sizer-responsive (npm)

MAL-2026-2154

Malicious code in chai-as-emitted (npm)

MAL-2026-2155

Malicious code in pino-pretty-log (npm)

MAL-2026-2156

Malicious code in tailwind-animationbasis (npm)

MAL-2026-2157

Malicious code in transitive_lib (npm)

MAL-2026-2153

Malicious code in @xvortexsockets/baileys (npm)

MAL-2026-2398

Malicious code in xrpl-hooks-ide (npm)

MAL-2026-2397

Malicious code in wraith-module (npm)

MAL-2026-2396

Malicious code in voodoo-internal-api (npm)

MAL-2026-2395

Malicious code in uuidvalidatorarabis (npm)

MAL-2026-2394

Malicious code in typescript-mock-data (npm)

MAL-2026-2393

Malicious code in this-is-my-test-package (npm)