Supply Chain Incidents

MAL-2026-115

Malicious code in hiqomu (npm)

MAL-2026-112

Malicious code in fbfu (npm)

MAL-2026-117

Malicious code in kdb1-demo-v2 (npm)

MAL-2026-107

Malicious code in 1kzr (npm)

MAL-2026-104

Malicious code in sort-imports-es6-autofix (npm)

MAL-2026-106

Malicious code in transform-decorators-legacy (npm)

MAL-2026-105

Malicious code in syntax-class-properties (npm)

MAL-2026-103

Malicious code in const-enum (npm)

MAL-2026-101

Malicious code in openblox-ts (npm)

MAL-2026-100

Malicious code in eslint-plugin-supertest (npm)

MAL-2026-102

Malicious code in redis-cookie-ts (npm)

MAL-2026-85

Malicious code in elastic-docs-v3-utilities (npm)

MAL-2026-88

Malicious code in evm-gateway-contracts-private (npm)

MAL-2026-84

Malicious code in code-review-frontend (npm)

MAL-2026-95

Malicious code in x-clients-features (npm)

MAL-2026-94

Malicious code in shopify-perf-kit (npm)

MAL-2026-90

Malicious code in matic-transfer-consumer (npm)

MAL-2026-89

Malicious code in importmap-polyfil (npm)

MAL-2026-91

Malicious code in okta-auth-js (npm)

MAL-2026-87

Malicious code in electra-web-player-event (npm)

MAL-2026-86

Malicious code in electra-web-player (npm)

MAL-2026-93

Malicious code in okta-signin-widget (npm)

MAL-2026-92

Malicious code in okta-loginpage-render (npm)

MAL-2026-77

Malicious code in polymarket-clob (npm)