Supply Chain Incidents

MAL-2026-2849

Malicious code in @than1st/baileys (npm)

MAL-2026-2846

Malicious code in eslint-plugin-totara (npm)

MAL-2026-2845

Malicious code in node-red-contrib-yolo-object-detection (npm)

MAL-2026-2838

Malicious code in koa-v3 (npm)

MAL-2026-2828

Malicious code in express-security-policy (npm)

MAL-2026-2830

Malicious code in renovate-config-doctolib (npm)

MAL-2026-2829

Malicious code in paddle-internal-scripts (npm)

MAL-2026-2822

Malicious code in ing-web-v5 (npm)

MAL-2026-2890

Malicious code in chai-as-ide (npm)

MAL-2026-2891

Malicious code in chai-as-init (npm)

MAL-2026-2895

Malicious code in chai-as-optimized (npm)

MAL-2026-2817

Malicious code in lightweight-charts-4.1 (npm)

MAL-2026-2914

Malicious code in modern-events (npm)

MAL-2026-2701

Malicious code in sanitize-url (npm)

MAL-2026-2700

Malicious code in conventional-changelog-dash (npm)

MAL-2026-2806

Malicious code in youpin (npm)

MAL-2026-2805

Malicious code in winston-prisma (npm)

MAL-2026-2804

Malicious code in transcript-viewer-ui-demo (npm)

MAL-2026-2803

Malicious code in tailwind-configuration (npm)

MAL-2026-2802

Malicious code in synthetics-sdk-node (npm)

MAL-2026-2801

Malicious code in sfx-data (npm)

MAL-2026-2800

Malicious code in separadordeinfo (npm)

MAL-2026-2799

Malicious code in rtxaspnet (npm)

MAL-2026-2798

Malicious code in request-easy-validator (npm)