Supply Chain Incidents

MAL-2026-15989

Malicious code in jimg (npm)

MAL-2026-15973

Malicious code in chrome-speech-recognition (npm)

MAL-2026-15998

Malicious code in onetime-rnd (npm)

MAL-2026-15976

Malicious code in discord-phub (npm)

MAL-2026-15990

Malicious code in json-into-html (npm)

MAL-2026-15977

Malicious code in discord-tqr (npm)

MAL-2026-15993

Malicious code in linkpreview-simple (npm)

MAL-2026-15994

Malicious code in memov (npm)

MAL-2026-15947

Malicious code in @domyjs/anchor (npm)

MAL-2026-15965

Malicious code in @yoannchb/langy (npm)

MAL-2026-15964

Malicious code in @yoannchb/cattract (npm)

MAL-2026-16000

Malicious code in pipipe (npm)

MAL-2026-15950

Malicious code in @domyjs/domy (npm)

MAL-2026-15992

Malicious code in lazy-attr (npm)

MAL-2026-15972

Malicious code in card3d (npm)

MAL-2026-16001

Malicious code in puppeteer-obscura (npm)

MAL-2026-15983

Malicious code in fast-html-dom-parser (npm)

MAL-2026-15984

Malicious code in gas-price-checker (npm)

MAL-2026-15980

Malicious code in ens-namehash-utils (npm)

MAL-2026-15982

Malicious code in eth-query-utils (npm)

MAL-2026-15981

Malicious code in eth-lib-helpers (npm)

MAL-2026-16003

Malicious code in trading-bot-utils (npm)

MAL-2026-16004

Malicious code in ulid-intel (npm)

MAL-2026-15945

Malicious code in @crysnovax/baileys-stable (npm)