Supply Chain Incidents

MAL-2026-6073

Malicious code in @mastra/observability (npm)

MAL-2026-6072

Malicious code in @mastra/loggers (npm)

MAL-2026-6074

Malicious code in @mastra/redis (npm)

MAL-2026-6071

Malicious code in n8n-nodes-security-test-poc (npm)

MAL-2026-6065

Malicious code in lab-services (npm)

MAL-2026-6067

Malicious code in scan-only (npm)

MAL-2026-6068

Malicious code in swift-parse-stream (npm)

MAL-2026-6066

Malicious code in quirky-token (npm)

MAL-2026-6062

Malicious code in sodel-pych (npm)

MAL-2026-6058

Malicious code in @ignacionunez91/keccak24 (npm)

MAL-2026-6063

Malicious code in sort-btree (npm)

MAL-2026-6064

Malicious code in tailwindcss-animates-css (npm)

MAL-2026-6059

Malicious code in express-validates (npm)

MAL-2026-6061

Malicious code in qrcode-generator-node (npm)

MAL-2026-6060

Malicious code in qrcode-express (npm)

MAL-2026-6172

Malicious code in platformspecific-webgl (npm)

MAL-2026-6148

Malicious code in async-protobuf-av (npm)

MAL-2026-6167

Malicious code in lazyloading-haptics (npm)

MAL-2026-6175

Malicious code in request-performance (npm)

MAL-2026-6180

Malicious code in userinterface-machinelearning (npm)

MAL-2026-6160

Malicious code in firebase-readability (npm)

MAL-2026-6181

Malicious code in virtualization-compression-collapse (npm)

MAL-2026-6165

Malicious code in ios-save-area-custom (npm)

MAL-2026-6151

Malicious code in buildautomation-touch (npm)