Supply Chain Incidents

MAL-2026-403

Malicious code in worldnormal (npm)

manage-root

MAL-2026-393

Malicious code in manage-root (npm)

private-internal-sdk

MAL-2026-396

Malicious code in private-internal-sdk (npm)

worldposition

MAL-2026-404

Malicious code in worldposition (npm)

vworldviewdir

MAL-2026-402

Malicious code in vworldviewdir (npm)

@mikudev/ridwan-baileys-mod

MAL-2026-382

Malicious code in @mikudev/ridwan-baileys-mod (npm)

@mikudev/signal

MAL-2026-384

Malicious code in @mikudev/signal (npm)

@mikudev/beles

MAL-2026-381

Malicious code in @mikudev/beles (npm)

@mikudev/ridwan-signal

MAL-2026-383

Malicious code in @mikudev/ridwan-signal (npm)

torbaileys

MAL-2026-399

Malicious code in torbaileys (npm)

tor-libsignal

MAL-2026-398

Malicious code in tor-libsignal (npm)

genki-analytics

MAL-2026-389

Malicious code in genki-analytics (npm)

charlie_charlie_kirky

MAL-2026-388

Malicious code in charlie_charlie_kirky (npm)

recaptcha-cors

MAL-2026-397

Malicious code in recaptcha-cors (npm)

n8n-nodes-zl-vietts

MAL-2026-394

Malicious code in n8n-nodes-zl-vietts (npm)

@diendh/n8n-nodes-tiktok-v2

MAL-2026-378

Malicious code in @diendh/n8n-nodes-tiktok-v2 (npm)

blocks-builder-manifest-generator

MAL-2026-385

Malicious code in blocks-builder-manifest-generator (npm)

natateste

MAL-2026-395

Malicious code in natateste (npm)

victim-package-c

MAL-2026-401

Malicious code in victim-package-c (npm)

victim-package-b

MAL-2026-400

Malicious code in victim-package-b (npm)

potdf

MAL-2026-377

Malicious code in potdf (npm)

coolpackage2323

PyPI

MAL-2026-376

Malicious code in coolpackage2323 (PyPI)

spellcheckerpy

PyPI

MAL-2026-375

Malicious code in spellcheckerpy (PyPI)

github.com/esm-dev/esm.sh

GHSA-2657-3c98-63jq

esm.sh has a path traversal in extractPackageTarball enables file writes from malicious packages

1 CVE