Supply Chain Incidents

MAL-2026-2529

Malicious code in use-form-builder-plugin (npm)

MAL-2026-2524

Malicious code in a2a-chat-canvas (npm)

MAL-2026-2526

Malicious code in request-js-validator (npm)

MAL-2026-2499

Malicious code in nerite-security-audit (npm)

MAL-2026-2500

Malicious code in totally-safe-util (npm)

MAL-2026-2498

Malicious code in df-sandbox-test (npm)

MAL-2026-2497

Malicious code in commerce-utils (npm)

MAL-2026-2496

Malicious code in chess-sec-ssrf1 (npm)

MAL-2026-2495

Malicious code in cloudera (npm)

MAL-2026-2493

Malicious code in cloudera-poc (npm)

MAL-2026-2492

Malicious code in admin0911 (npm)

MAL-2026-2491

Malicious code in @not-nemo/crypto-tracker (npm)

MAL-2026-2716

Malicious code in @needl-ai/common (npm)

MAL-2026-2452

Malicious code in strapi-plugin-blurhash (npm)

MAL-2026-2450

Malicious code in strapi-plugin-advanced-uuid (npm)

MAL-2026-2463

Malicious code in strapi-plugin-guardarian-ext (npm)

MAL-2026-2465

Malicious code in strapi-plugin-health-check (npm)

MAL-2026-2459

Malicious code in strapi-plugin-debug-tools (npm)

MAL-2026-2455

Malicious code in strapi-plugin-content-sync (npm)

MAL-2026-2453

Malicious code in strapi-plugin-cms-tools (npm)

MAL-2026-2466

Malicious code in strapi-plugin-hextest (npm)

MAL-2026-2461

Malicious code in strapi-plugin-finseven (npm)

MAL-2026-2471

Malicious code in strapi-plugin-nordica (npm)

MAL-2026-2474

Malicious code in strapi-plugin-nordica-deep (npm)