Supply Chain Incidents

MAL-2026-560

Malicious code in transform-async-to-generator (npm)

MAL-2026-559

Malicious code in syntax-async-functions (npm)

MAL-2026-561

Malicious code in transform-regenerator (npm)

MAL-2026-551

Malicious code in express-lists-routes (npm)

MAL-2026-552

Malicious code in json-mapping-web (npm)

MAL-2026-550

Malicious code in cdnhost (npm)

MAL-2026-549

Malicious code in blockchain-helper-lib (npm)

MAL-2026-548

Malicious code in tabletas (PyPI)

MAL-2026-547

Malicious code in solhint-plugin-hyperlane (PyPI)

MAL-2026-527

Malicious code in @santandergroup-uk/edgehome-components (npm)

MAL-2026-534

Malicious code in internallib_v828 (npm)

MAL-2026-536

Malicious code in morgan.js (npm)

MAL-2026-541

Malicious code in pump.js (npm)

MAL-2026-537

Malicious code in mysql2.js (npm)

MAL-2026-535

Malicious code in knex.js (npm)

MAL-2026-542

Malicious code in stylus.js (npm)

MAL-2026-530

Malicious code in grepleaks (npm)

MAL-2026-546

Malicious code in xhjxhjhiagent (npm)

MAL-2026-531

Malicious code in hackerxhj (npm)

MAL-2026-544

Malicious code in testxhjhk (npm)

MAL-2026-545

Malicious code in testxhjhka (npm)

MAL-2026-532

Malicious code in hiagentxhjrce (npm)

MAL-2026-533

Malicious code in hiagentxhjrceme (npm)

MAL-2026-526

Malicious code in @row-components/pricing-embedded-sui (npm)