Supply Chain Incidents

MAL-0000-phantomraven-syntax-do-expressions

Malicious npm package: syntax-do-expressions (PhantomRaven campaign, Wave 3)

MAL-0000-phantomraven-transform-inline-consecutive-adds

Malicious npm package: transform-inline-consecutive-adds (PhantomRaven campaign, Wave 3)

MAL-0000-phantomraven-react-you-might-not-need-an-effect

Malicious npm package: react-you-might-not-need-an-effect (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-import-newlines

Malicious npm package: import-newlines (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-es6-recommended

Malicious npm package: es6-recommended (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-syntax-decorators

Malicious npm package: syntax-decorators (PhantomRaven campaign, Wave 2)

MAL-2026-1426

Malicious code in @3stripes/common (npm)

MAL-2026-1427

Malicious code in @3stripes/helpers (npm)

MAL-2026-1425

Malicious code in @3stripes/auth (npm)

MAL-2026-1424

Malicious code in @3stripes/api-client (npm)

MAL-2026-1430

Malicious code in @3stripes/utils (npm)

MAL-2026-1429

Malicious code in @3stripes/ui (npm)

MAL-2026-1428

Malicious code in @3stripes/lib (npm)

MAL-2026-1454

Malicious code in n8n-nodes-text-helpers (npm)

MAL-2026-1457

Malicious code in tracking-service-config (npm)

MAL-2026-1423

Malicious code in test_pkg_forppe (npm)

MAL-2026-1455

Malicious code in native_dep (npm)

MAL-2026-1421

Malicious code in devlino (npm)

MAL-2026-1420

Malicious code in cw-isdk (npm)

MAL-2026-1418

Malicious code in tailwind-mainanimation (npm)

MAL-2026-1419

Malicious code in tailwindcss-style-modify (npm)

MAL-2026-1415

Malicious code in pulsard-utils (npm)

MAL-2026-1416

Malicious code in twitch-security (npm)

MAL-2026-1417

Malicious code in twitch.dashboard-v2.core (npm)