Supply Chain Incidents

MAL-2026-144

Malicious code in scrollbar-stylecss (npm)

MAL-2026-148

Malicious code in tailwind-autoanimation (npm)

MAL-2026-193

Malicious code in cko-ui-toolkit (npm)

MAL-2026-127

Malicious code in @bingads-webui-component-legacy/storage (npm)

MAL-2026-125

Malicious code in kmeet (npm)

MAL-2026-124

Malicious code in wwwt (npm)

MAL-2026-115

Malicious code in hiqomu (npm)

MAL-2026-118

Malicious code in klywarn (npm)

MAL-2026-116

Malicious code in jh5o (npm)

MAL-2026-120

Malicious code in qyxb (npm)

MAL-2026-109

Malicious code in @nestor_hexom/garfield1 (npm)

MAL-2026-121

Malicious code in syqara (npm)

MAL-2026-110

Malicious code in @nestor_hexom/qyxb (npm)

MAL-2026-114

Malicious code in garfield777 (npm)

MAL-2026-122

Malicious code in vjri (npm)

MAL-2026-111

Malicious code in aog3 (npm)

MAL-2026-119

Malicious code in klywarns (npm)

MAL-2026-123

Malicious code in wifzap (npm)

MAL-2026-113

Malicious code in garfield000 (npm)

MAL-2026-108

Malicious code in @nestor_hexom/garfield (npm)

MAL-2026-112

Malicious code in fbfu (npm)

MAL-2026-117

Malicious code in kdb1-demo-v2 (npm)

MAL-2026-107

Malicious code in 1kzr (npm)

MAL-2026-105

Malicious code in syntax-class-properties (npm)