Supply Chain Incidents

MAL-2026-1207

Malicious code in selfbot-lofy (npm)

MAL-2026-1195

Malicious code in consolelofy (npm)

MAL-2026-1189

Malicious code in bmath (npm)

MAL-2026-1186

Malicious code in @powpegtest/powpeg (npm)

MAL-2026-1197

Malicious code in demo-ip-package-cm (npm)

MAL-2026-1196

Malicious code in demo-ip-package (npm)

MAL-2026-1198

Malicious code in flycord (npm)

MAL-2026-1199

Malicious code in fps-logger (npm)

MAL-2026-1185

Malicious code in @bookings.microsoft.com/s (npm)

MAL-2026-1187

Malicious code in @twilio-client/twilio-client (npm)

MAL-2026-1183

Malicious code in rbxm-utils (npm)

MAL-2026-1184

Malicious code in web-prompt (npm)

MAL-2026-1182

Malicious code in bigmathutils-v2 (npm)

MAL-2026-1180

Malicious code in webnoch (npm)

MAL-2026-1181

Malicious code in webnochs (npm)

MAL-2026-1174

Malicious code in ethersnode (npm)

MAL-2026-1175

Malicious code in ethersnog (npm)

MAL-2026-1173

Malicious code in eslint-verify-plugin (npm)

MAL-2026-1176

Malicious code in gabby-types (npm)

MAL-2026-1170

Malicious code in @global-dax-ad-platform/dax-utils (npm)

MAL-2026-1169

Malicious code in @global-dax-ad-platform/dax-types (npm)

MAL-2026-1166

Malicious code in @global-dax-ad-platform/dax-hooks (npm)

MAL-2026-1167

Malicious code in @global-dax-ad-platform/dax-modules (npm)

MAL-2026-1165

Malicious code in @global-dax-ad-platform/dax-components (npm)