Supply Chain Incidents

MAL-2026-1218

Malicious code in chai-as-confirmed (npm)

MAL-2026-1227

Malicious code in gaia-marionette (npm)

MAL-2026-1216

Malicious code in pdfjs-dist-v5 (npm)

MAL-2026-1215

Malicious code in whop-sdk (npm)

MAL-2026-1206

Malicious code in polymarket-trade-bot-api (npm)

MAL-2026-1203

Malicious code in polmarket (npm)

MAL-2026-1192

Malicious code in chai-as-proofed (npm)

MAL-2026-1191

Malicious code in chai-as-mock (npm)

MAL-2026-1194

Malicious code in cmc-client (npm)

MAL-2026-1205

Malicious code in polymarket-provider (npm)

MAL-2026-1202

Malicious code in mvn-runtime (npm)

MAL-2026-1188

Malicious code in alpha-replicator (npm)

MAL-2026-1209

Malicious code in tailwindcss-form-bundler (npm)

MAL-2026-1208

Malicious code in tailwindcss-fonts-bundler (npm)

MAL-2026-1193

Malicious code in cloud-apis (npm)

MAL-2026-1200

Malicious code in mongoose-apis (npm)

MAL-2026-1204

Malicious code in polygon-bitquery-api (npm)

MAL-2026-1201

Malicious code in mongos-api (npm)

MAL-2026-1210

Malicious code in tailwindcss-forms-animation (npm)

MAL-2026-1213

Malicious code in turbo-json-parser (npm)

MAL-2026-1211

Malicious code in tailwindcss-forms-component (npm)

MAL-2026-1214

Malicious code in typescript-constructors (npm)

MAL-2026-1212

Malicious code in tailwindcss-forms-componentes (npm)

MAL-2026-1190

Malicious code in bubblemap-bypass-sdk (npm)