Supply Chain Incidents

MAL-2026-11401

Malicious code in thoughtgear (npm)

MAL-2026-11379

Malicious code in shsk (npm)

MAL-2026-11317

Malicious code in host-inspector-module (npm)

MAL-2026-11303

Malicious code in express-bubble (npm)

MAL-2026-11236

Malicious code in android-web-logger (npm)

MAL-2026-11362

Malicious code in qserver (npm)

MAL-2026-11305

Malicious code in express-test-dependency (npm)

MAL-2026-11331

Malicious code in merg-descripters (npm)

MAL-2026-11212

Malicious code in @goodjavascript/dotenv (npm)

MAL-2026-11278

Malicious code in discord-ms (npm)

MAL-2026-11280

Malicious code in discord-starter (npm)

MAL-2026-11365

Malicious code in react-ag-grid (npm)

MAL-2026-11235

Malicious code in ag-grid-boost (npm)

MAL-2026-11320

Malicious code in imut-set (npm)

MAL-2026-11327

Malicious code in lodash-ex (npm)

MAL-2026-11396

Malicious code in test-wastu (npm)

MAL-2026-11409

Malicious code in wastu (npm)

MAL-2026-11377

Malicious code in scol (npm)

MAL-2026-11248

Malicious code in blbird (npm)

MAL-2026-11412

Malicious code in zcas (npm)

MAL-2026-11287

Malicious code in ecto-logger (npm)

MAL-2026-11385

Malicious code in spectral-wraith (npm)

MAL-2026-11384

Malicious code in spectral-corsair (npm)

MAL-2026-11232

Malicious code in @spectraltest/loglevel (npm)