Supply Chain Incidents

MAL-2026-914

Malicious code in @qualys/react-web (npm)

MAL-2026-943

Malicious code in ethereums-lint (npm)

MAL-2026-942

Malicious code in ethereum-lint (npm)

MAL-2026-908

Malicious code in hops-preset-jest (npm)

MAL-2026-896

Malicious code in sinon-web3-chain (npm)

MAL-2026-895

Malicious code in json-mapping-src (npm)

MAL-2026-890

Malicious code in responsible-ai (npm)

MAL-2026-879

Malicious code in codexworld (npm)

MAL-2026-881

Malicious code in contosoapp (npm)

MAL-2026-883

Malicious code in ecosystem_ui (npm)

MAL-2026-887

Malicious code in pyrefly (npm)

MAL-2026-888

Malicious code in pyright-root (npm)

MAL-2026-889

Malicious code in responses-starter-app (npm)

MAL-2026-886

Malicious code in open-answer-engine-frontend (npm)

MAL-2026-884

Malicious code in hxz-protection (npm)

MAL-2026-891

Malicious code in wropz-6module (npm)

MAL-2026-892

Malicious code in wropz-module (npm)

MAL-2026-885

Malicious code in metadata-stripper (npm)

MAL-2026-882

Malicious code in despicable-me (npm)

MAL-2026-893

Malicious code in xsstesting (npm)

MAL-2026-880

Malicious code in console-style-pro0o0o0o (npm)

MAL-2026-873

Malicious code in @depro0x/despicable-me (npm)

MAL-2026-872

Malicious code in stylelint-recommended (npm)

MAL-2026-871

Malicious code in envoy1 (npm)