Supply Chain Incidents

MAL-2026-596

Malicious code in turbotax (npm)

MAL-2026-594

Malicious code in epic-asset-uploader (npm)

MAL-2026-591

Malicious code in kol7a (npm)

MAL-2026-592

Malicious code in lvldragdrop (npm)

MAL-2026-584

Malicious code in chai-as-extended (npm)

MAL-2026-589

Malicious code in dotenv-embed (npm)

MAL-2026-585

Malicious code in chai-async-tests (npm)

MAL-2026-588

Malicious code in chai-sub (npm)

MAL-2026-587

Malicious code in chai-px (npm)

MAL-2026-586

Malicious code in chai-chains-async (npm)

MAL-2026-579

Malicious code in skndkjasndkjan (npm)

MAL-2026-583

Malicious code in vuejavascript (npm)

MAL-2026-582

Malicious code in somsodamsd (npm)

MAL-2026-578

Malicious code in @pukpuk1/somsodamsd (npm)

MAL-2026-581

Malicious code in somesomesomesome (npm)

MAL-2026-580

Malicious code in somesomesome (npm)

MAL-2026-626

Malicious code in react-toast-cold (npm)

MAL-2026-570

Malicious code in lyatly-utils (npm)

MAL-2026-571

Malicious code in okijuh (npm)

MAL-2026-564

Malicious code in chai-as-hashed (npm)

MAL-2026-565

Malicious code in converse-rn-lib (npm)

MAL-2026-576

Malicious code in teslaone (npm)

MAL-2026-569

Malicious code in ern-picking2-api (npm)

MAL-2026-577

Malicious code in transform-vue-jsx (npm)