Supply Chain Incidents

MAL-2026-1683

Malicious code in chai-promised-tools (npm)

MAL-2026-1682

Malicious code in chai-promised-plugin (npm)

MAL-2026-1681

Malicious code in chai-promised-cli (npm)

MAL-2026-1680

Malicious code in chai-promised-await (npm)

MAL-2026-1679

Malicious code in chai-promised-async (npm)

MAL-2026-1678

Malicious code in chai-conf (npm)

MAL-2026-1677

Malicious code in chai-cli-async (npm)

MAL-2026-1676

Malicious code in chai-chai-chain-promised (npm)

MAL-2026-1675

Malicious code in chai-await-promised (npm)

MAL-2026-1674

Malicious code in chai-await-cli (npm)

MAL-2026-1673

Malicious code in chai-await-chain (npm)

MAL-2026-1672

Malicious code in chai-as-sync (npm)

MAL-2026-1671

Malicious code in chai-as-resolved (npm)

MAL-2026-1670

Malicious code in chai-as-prop (npm)

MAL-2026-1669

Malicious code in chai-as-prompt (npm)

MAL-2026-1668

Malicious code in chai-as-produced (npm)

MAL-2026-1667

Malicious code in cat-ecommerce-alloy (npm)

MAL-2026-1666

Malicious code in carbon-mac-copy-cloner (npm)

MAL-2026-1665

Malicious code in browser-compat-data (npm)

MAL-2026-1663

Malicious code in braze-content-card-island (npm)

MAL-2026-1664

Malicious code in brisk-web-ssr (npm)

MAL-2026-1662

Malicious code in blob-internal-security-test-f63eabf7 (npm)

MAL-2026-1661

Malicious code in blackstone-core (npm)

MAL-2026-1660

Malicious code in bis-schemas (npm)