Supply Chain Incidents

MAL-2026-6589

Malicious code in envfile-sync (npm)

MAL-2026-6590

Malicious code in envfile-sync-cli (npm)

MAL-2026-6587

Malicious code in clob-client-math (npm)

MAL-2026-6591

Malicious code in ledgerflow-deploy-utils (npm)

MAL-2026-6580

Malicious code in loadutils (npm)

MAL-2026-6578

Malicious code in layerd-unit-codec-parser (npm)

MAL-2026-6583

Malicious code in pino-debugging (npm)

MAL-2026-6582

Malicious code in openai-agents-helpers (npm)

MAL-2026-6584

Malicious code in poly-kelly (npm)

MAL-2026-6576

Malicious code in checkmarx-claude-cache (npm)

MAL-2026-6581

Malicious code in ollama-helpers (npm)

MAL-2026-6577

Malicious code in int_sezzle_sfra (npm)

MAL-2026-6585

Malicious code in stake-math (npm)

MAL-2026-6579

Malicious code in lessload (npm)

MAL-2026-6586

Malicious code in yastatic-s3 (npm)

MAL-2026-6575

Malicious code in @ibrahim1337/baksen (npm)

MAL-2026-6563

Malicious code in @thone33/analytics-injector (npm)

MAL-2026-6564

Malicious code in @thone33/core-utils (npm)

MAL-2026-6569

Malicious code in longzy-basic-ui (npm)

MAL-2026-6570

Malicious code in pkg-fallback (npm)

MAL-2026-6568

Malicious code in express-mocha-test (npm)

MAL-2026-6562

Malicious code in @epic-common/observability-node (npm)

MAL-2026-6574

Malicious code in yandex-geobase (npm)

MAL-2026-6571

Malicious code in react-wp-viewer (npm)