Supply Chain Incidents

MAL-2026-1731

Malicious code in express-http-validator (npm)

MAL-2026-1730

Malicious code in express-configers (npm)

MAL-2026-1729

Malicious code in eslint-plugin-superhuman-custom-rules (npm)

MAL-2026-1728

Malicious code in escaux (npm)

MAL-2026-1727

Malicious code in es1int-configer (npm)

MAL-2026-1726

Malicious code in ersagent-frontend (npm)

MAL-2026-1725

Malicious code in env-workflow-test (npm)

MAL-2026-1724

Malicious code in engineers (npm)

MAL-2026-1723

Malicious code in elf-stats-velvet-ledger-928 (npm)

MAL-2026-1722

Malicious code in ehance-assistant33 (npm)

MAL-2026-1721

Malicious code in ehance-assistant (npm)

MAL-2026-1720

Malicious code in dubbo-web-example (npm)

MAL-2026-1719

Malicious code in dstny (npm)

MAL-2026-1718

Malicious code in dpc-sign (npm)

MAL-2026-1717

Malicious code in dotenvx-int (npm)

MAL-2026-1716

Malicious code in dotenv-plugin (npm)

MAL-2026-1715

Malicious code in dotenv-nodejs (npm)

MAL-2026-1714

Malicious code in dotenv-node-promised (npm)

MAL-2026-1713

Malicious code in dotenv-node-cli (npm)

MAL-2026-1712

Malicious code in dotenv-mono-cli (npm)

MAL-2026-1711

Malicious code in dotenv-int (npm)

MAL-2026-1710

Malicious code in dotenv-cli-node (npm)

MAL-2026-1709

Malicious code in dnsfilter-frontend (npm)

MAL-2026-1708

Malicious code in dns-filter-dashboard (npm)