Supply Chain Incidents

MAL-2026-537

Malicious code in mysql2.js (npm)

MAL-2026-542

Malicious code in stylus.js (npm)

MAL-2026-530

Malicious code in grepleaks (npm)

MAL-2026-546

Malicious code in xhjxhjhiagent (npm)

MAL-2026-545

Malicious code in testxhjhka (npm)

MAL-2026-531

Malicious code in hackerxhj (npm)

MAL-2026-544

Malicious code in testxhjhk (npm)

MAL-2026-532

Malicious code in hiagentxhjrce (npm)

MAL-2026-533

Malicious code in hiagentxhjrceme (npm)

MAL-2026-526

Malicious code in @row-components/pricing-embedded-sui (npm)

MAL-2026-543

Malicious code in tailwind-components-cli (npm)

MAL-2026-539

Malicious code in n8n-nodes-gg-udhasudsh-hgjkhg-official (npm)

MAL-2026-538

Malicious code in n8n-nodes-gasdhgfuy-rejerw-ytjsadx (npm)

MAL-2026-540

Malicious code in n8n-nodes-xkwqpzrt-jmflhvbn-dsyocgxwmkelpt (npm)

MAL-2026-529

Malicious code in fileupload-core (npm)

MAL-2026-528

Malicious code in @shije/new-qs (npm)

MAL-2026-520

Malicious code in ftm-noderpc (npm)

MAL-2026-524

Malicious code in mapkit-example-vue (npm)

MAL-2026-521

Malicious code in hammer-jquery (npm)

MAL-2026-525

Malicious code in sandbox-hooks (npm)

MAL-2026-523

Malicious code in mapkit-example-svelte (npm)

MAL-2026-522

Malicious code in magento-coding-standard-eslint-plugin (npm)

MAL-2026-519

Malicious code in @afg-ikea/ikea-modals (npm)

MAL-2026-517

Malicious code in @afg-ikea/ikea-family-registration-module (npm)