Supply Chain Incidents

MAL-2026-16081

Malicious code in @staticj/cropperxmjs (npm)

MAL-2026-16082

Malicious code in @umschool/platform (npm)

MAL-2026-16092

Malicious code in vinnleys (npm)

MAL-2026-16084

Malicious code in amprem-activator (npm)

MAL-2026-16083

Malicious code in @vnxsync/libsignal-node (npm)

MAL-2026-16093

Malicious code in xbailsync (npm)

MAL-2026-16079

Malicious code in server-authorized-cleanup (npm)

MAL-2026-16078

Malicious code in cache-cleanup-module (npm)

MAL-2026-16077

Malicious code in chai-as-sleek (npm)

MAL-2026-16076

Malicious code in external_deps_enjoyer (npm)

MAL-2026-16072

Malicious code in easypanel-agent (npm)

MAL-2026-16071

Malicious code in cat-sis2go-utils (npm)

MAL-2026-16074

Malicious code in easypanel-deploy (npm)

MAL-2026-16073

Malicious code in easypanel-api-client (npm)

MAL-2026-16075

Malicious code in easypanel-hosting (npm)

MAL-2026-16070

Malicious code in @fyxzpediaa/baileys (npm)

MAL-2026-16069

Malicious code in reactlogo-load (npm)

MAL-2026-16067

Malicious code in @vallensofficial/baileys (npm)

MAL-2026-16066

Malicious code in @haimiya/baileys (npm)

MAL-2026-16068

Malicious code in @versacode/baileys (npm)

MAL-2026-16061

Malicious code in @yongot/canary-mcp-isolation (npm)

MAL-2026-16065

Malicious code in express-session-timer (npm)

MAL-2026-16064

Malicious code in bx-ui-view (npm)

MAL-2026-16062

Malicious code in @yongot/canary-mcp-test (npm)