Supply Chain Incidents

MAL-2026-1024

Malicious code in @protonme/routing (npm)

MAL-2026-1025

Malicious code in @unitedcapitalfinancialadvisors/finlife-component-library (npm)

MAL-2026-1020

Malicious code in @ai-studio-web/app (npm)

MAL-2026-1021

Malicious code in @atg-aml-shared/kyc-domain (npm)

MAL-2026-1022

Malicious code in @coinmetro/app (npm)

MAL-2026-1023

Malicious code in @kiukicom/sidebar (npm)

MAL-2026-1014

Malicious code in chai-iotype (npm)

MAL-2026-1016

Malicious code in js-multer (npm)

MAL-2026-1013

Malicious code in chai-as-pause (npm)

MAL-2026-1017

Malicious code in json-mapping-srcs (npm)

MAL-2026-1015

Malicious code in es1int-config (npm)

MAL-2026-1006

Malicious code in chai-tools (npm)

MAL-2026-1005

Malicious code in argon-web3-chain (npm)

MAL-2026-1011

Malicious code in node-argon (npm)

MAL-2026-1007

Malicious code in dotenvx-ext (npm)

MAL-2026-1010

Malicious code in modify-setting (npm)

MAL-2026-1008

Malicious code in es1int-re1ease (npm)

MAL-2026-1009

Malicious code in express-soaps (npm)

MAL-2026-1012

Malicious code in ultimates-express (npm)

MAL-2026-1040

Malicious code in react-markdown-canvas (npm)

MAL-2026-1041

Malicious code in secure-monkey (npm)

MAL-2026-999

Malicious code in react-dropzone-truffle (npm)

MAL-2026-997

Malicious code in npm-security-testing (npm)

MAL-2026-998

Malicious code in rbxm-tools (npm)