Supply Chain Incidents

MAL-2026-2368

Malicious code in json-mapping-token (npm)

MAL-2026-2367

Malicious code in json-mapping-fetch (npm)

MAL-2026-2366

Malicious code in ghost-module (npm)

MAL-2026-2365

Malicious code in env-nodejs (npm)

MAL-2026-2364

Malicious code in env-node-cli (npm)

MAL-2026-2363

Malicious code in env-extend (npm)

MAL-2026-2362

Malicious code in env-express-cli (npm)

MAL-2026-2361

Malicious code in env-express (npm)

MAL-2026-2360

Malicious code in env-expanded (npm)

MAL-2026-2359

Malicious code in env-embed (npm)

MAL-2026-2358

Malicious code in env-cli-express (npm)

MAL-2026-2357

Malicious code in ectoplast-spirit (npm)

MAL-2026-2355

Malicious code in ecto-spirit (npm)

MAL-2026-2356

Malicious code in ecto-spirit-core (npm)

MAL-2026-2354

Malicious code in ecto-registry (npm)

MAL-2026-2353

Malicious code in ecto-engine (npm)

MAL-2026-2352

Malicious code in ecto-corsair-lwirz (npm)

MAL-2026-2351

Malicious code in dotenv-xtend (npm)

MAL-2026-2350

Malicious code in dotenv-express (npm)

MAL-2026-2349

Malicious code in deriv_ppetest (npm)

MAL-2026-2348

Malicious code in cursed-module (npm)

MAL-2026-2347

Malicious code in ctf-package-onetimeuseforctf (npm)

MAL-2026-2346

Malicious code in corsair-module (npm)

MAL-2026-2345

Malicious code in codecoverage-tools (npm)