Supply Chain Incidents

MAL-2026-213

Malicious code in @maxcointech/simple-string-utils (npm)

simple-string-utils3

MAL-2026-233

Malicious code in simple-string-utils3 (npm)

jz-test-npm

MAL-2026-226

Malicious code in jz-test-npm (npm)

luxon-js

MAL-2026-228

Malicious code in luxon-js (npm)

inquirer-js

MAL-2026-224

Malicious code in inquirer-js (npm)

framer-motion-js

MAL-2026-220

Malicious code in framer-motion-js (npm)

jsdom-js

MAL-2026-225

Malicious code in jsdom-js (npm)

react-hook-form-js

MAL-2026-232

Malicious code in react-hook-form-js (npm)

immer-js

MAL-2026-223

Malicious code in immer-js (npm)

huggingface-js

MAL-2026-222

Malicious code in huggingface-js (npm)

llamaindex-js

MAL-2026-227

Malicious code in llamaindex-js (npm)

pinecone-js

MAL-2026-231

Malicious code in pinecone-js (npm)

milvus-js

MAL-2026-229

Malicious code in milvus-js (npm)

xml2js-js

MAL-2026-234

Malicious code in xml2js-js (npm)

firestore-types

MAL-2026-219

Malicious code in firestore-types (npm)

analytics-browser

MAL-2026-214

Malicious code in analytics-browser (npm)

auth-types

MAL-2026-215

Malicious code in auth-types (npm)

gradle-plugin

MAL-2026-221

Malicious code in gradle-plugin (npm)

experimental-utils

MAL-2026-217

Malicious code in experimental-utils (npm)

@t4i-cms-components/contact-card

MAL-2026-209

Malicious code in @t4i-cms-components/contact-card (npm)

lyonscg

MAL-2026-212

Malicious code in lyonscg (npm)

@workleap-ai/shared

MAL-2026-210

Malicious code in @workleap-ai/shared (npm)

@workleap-widgets/client

MAL-2026-211

Malicious code in @workleap-widgets/client (npm)

@gwp-gtmt-components/event-listener

MAL-2026-208

Malicious code in @gwp-gtmt-components/event-listener (npm)