Supply Chain Incidents

MAL-2026-14092

Malicious code in rimo-env-validator (npm)

MAL-2026-14098

Malicious code in utils-bundle (npm)

MAL-2026-14079

Malicious code in elf-stats-cranberry-wishlist-933 (npm)

MAL-2026-14078

Malicious code in elf-stats-caroling-stocking-510 (npm)

MAL-2026-14097

Malicious code in thepackagethatworks_ (npm)

MAL-2026-14082

Malicious code in google-logging-utils-internal (npm)

MAL-2026-14087

Malicious code in mw-filesystem-events-nodream-es6 (npm)

MAL-2026-14093

Malicious code in rtms-manager-dev (npm)

MAL-2026-14080

Malicious code in expect-bundle (npm)

MAL-2026-14088

Malicious code in nolimitcity (npm)

MAL-2026-14094

Malicious code in saps_secplayground_npm_ai (npm)

MAL-2026-14019

Malicious code in fr-ito-web-react (npm)

MAL-2026-14016

Malicious code in preinstall-hook-webhook-callback-demo (npm)

MAL-2026-13990

Malicious code in wct-st (npm)

MAL-2026-13991

Malicious code in webautomation_js (npm)

MAL-2026-13989

Malicious code in @secauditb20y/sec-test-r3b (npm)

MAL-2026-14009

Malicious code in root-locator (npm)

MAL-2026-14013

Malicious code in source-analyzer (npm)

MAL-2026-14005

Malicious code in path-match-js (npm)

MAL-2026-14007

Malicious code in react-shield (npm)

MAL-2026-13972

Malicious code in @jacksher/install-exec-poc (npm)

MAL-2026-13985

Malicious code in node-config-svg-contract (npm)

MAL-2026-13986

Malicious code in notafollower (npm)

MAL-2026-13978

Malicious code in datefmt-util-helper (npm)